[kvstore]
# The maximum size, in megabytes (MB), of the result that are returned for a single query to a collection.
# ITSI requires approximately 500MB per 1,000 KPIs. Override this value if necessary.
# Keep this value in sync with the "object_batch_sizes" stanza in itsi_settings.conf.
# Default: 500 MB
max_size_per_result_mb = 500
# max_size_per_batch_result_mb should be at least max_size_per_result_mb for consistent behavior in ITSI.
max_size_per_batch_result_mb = 1000

# The maximum number of items that you can save to the KV store in one batch_save operation.
# This setting accounts for the fact that some users of Episode Review have thousands of subgroups per aggregation policy.
# It is recommended that you do not change this value to below 20000.
max_documents_per_batch_save = 20000

# [search]
# If you are on Splunk Enterprise version 7.3.0 or later, do not un-comment this setting.
# If you are on Splunk Enterprise version 7.2.4, un-comment this setting.
# If you are on Splunk Enterprise version 7.2.3 or below, see the documentation at
# https://docs.splunk.com/Documentation/ITSI/latest/ReleaseNotes/Knownissues#Splunk_platform_issues_that_impact_ITSI_compatibility
# phased_execution_mode = auto

[stats]
# The maximum number of elements to emit for a sparkline.
# This setting overrides the 'list_maxsize' setting in Splunk Enterprise and other
# customized apps to prevent performance issues in ITSI visualizations.
sparkline_maxsize = 100

[restapi]
# Maximum result rows to be returned by /events or /results getters from REST API.
maxresultrows = 500000