I have lots of lines like the ones below from splunkd.log :
09-27-2013 15:04:28.681 +0000 INFO IndexProcessor - Starting to move buckets with the oldest latest time until we achieve compliance (current size=337945007355, max=146800640000)
09-27-2013 15:04:29.726 +0000 INFO IndexProcessor - Starting to move buckets with the oldest latest time until we achieve compliance (current size=337945445225, max=146800640000)
09-27-2013 15:04:30.761 +0000 INFO IndexProcessor - Starting to move buckets with the oldest latest time until we achieve compliance (current size=337948447673, max=146800640000)
Doing some basic math shows that the current size only ever increases. Does this mean that I'm accumulating buckets faster than they can be aged off? What should I do?
... View more