Deployment Architecture

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment.

faisal_saifi
New Member

one of my index size is 500 GB now its almost getting full so want to increase size to 2TB. I am using multi site cluster environment. Can anyone please suggest me how to do it?

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

@faisal_saifi given that you have the available disk capacity on your indexers, you can change the default from 500GB in indexes.conf. You'll want to make this change on your index cluster master in :

$SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf

find the index stanza you want to increase the size on

[indexB]
maxTotalDataSizeMB = 2000000

Apply bundle from cluster master to peers:
$SPLUNK_HOME/bin
./splunk apply cluster-bundle --answer-yes

0 Karma

faisal_saifi
New Member

Thanks Philip to respond on this. i have already performed the steps you suggested but after applying cluster bundle the changes has been reflected to slave conf file of indexers but it is still not reflecting on GUI index volume.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...