You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
30 lines
1.5 KiB
30 lines
1.5 KiB
[kvstore]
|
|
# The maximum size, in megabytes (MB), of the result that are returned for a single query to a collection.
|
|
# ITSI requires approximately 500MB per 1,000 KPIs. Override this value if necessary.
|
|
# Keep this value in sync with the "object_batch_sizes" stanza in itsi_settings.conf.
|
|
# Default: 500 MB
|
|
max_size_per_result_mb = 500
|
|
# max_size_per_batch_result_mb should be at least max_size_per_result_mb for consistent behavior in ITSI.
|
|
max_size_per_batch_result_mb = 1000
|
|
|
|
# The maximum number of items that you can save to the KV store in one batch_save operation.
|
|
# This setting accounts for the fact that some users of Episode Review have thousands of subgroups per aggregation policy.
|
|
# It is recommended that you do not change this value to below 20000.
|
|
max_documents_per_batch_save = 20000
|
|
|
|
# [search]
|
|
# If you are on Splunk Enterprise version 7.3.0 or later, do not un-comment this setting.
|
|
# If you are on Splunk Enterprise version 7.2.4, un-comment this setting.
|
|
# If you are on Splunk Enterprise version 7.2.3 or below, see the documentation at
|
|
# https://docs.splunk.com/Documentation/ITSI/latest/ReleaseNotes/Knownissues#Splunk_platform_issues_that_impact_ITSI_compatibility
|
|
# phased_execution_mode = auto
|
|
|
|
[stats]
|
|
# The maximum number of elements to emit for a sparkline.
|
|
# This setting overrides the 'list_maxsize' setting in Splunk Enterprise and other
|
|
# customized apps to prevent performance issues in ITSI visualizations.
|
|
sparkline_maxsize = 100
|
|
|
|
[restapi]
|
|
# Maximum result rows to be returned by /events or /results getters from REST API.
|
|
maxresultrows = 500000 |