Deployment Architecture

Is maxWarmDBCount affected by db_ and rb_ files? Or just db_ files?

jorcabro
Explorer

Hi,

I'm running out of space so I want to add the maxWarmDBCount parameter to move buckets from warm to cold (cold buckets are in another path so no storage problems).

Inside the db folder I have these different files:

hot_*
db_*
rb_*
number_
CreationTime
GlobalMetaData
_splunktemps

I know rb_ are the replicated buckets from other indexes but I'm not sure if the maxWarmDBCount only counts de db_ files or the rb_ as well, and possibly the number_ files, as I don't know what these are.

If the total count inside db folder is 213 files and 192 of these are db_ and rb_ files. Would be okay to set maxWarmDBCount to 150?
Thanks.

0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...