[default] thawedPath = $SPLUNK_DB/$_index_name/thaweddb coldPath = volume:secondary/$_index_name/colddb homePath = volume:primary/$_index_name/db tstatsHomePath = volume:primary/$_index_name/datamodel_summary tsidxWritingLevel = 4 journalCompression = zstd enableDataIntegrityControl = 0 enableTsidxReduction = 0 archiver.enableDataArchive = 0 #bucketRebuildMemoryHint = 0 compressRawdata = 1 enableOnlineBucketRepair = 1 rtRouterQueueSize = rtRouterThreads = selfStorageThreads = suspendHotRollByDeleteQuery = 0 syncMeta = 1 ## Config par defaut UNITEP ## maxDataSize = 100 maxHotBuckets = 1 maxWarmDBCount = 1 maxTotalDataSizeMB = 1000 frozenTimePeriodInSecs = 31536000 [idx_m-tih_windows] maxDataSize = auto maxHotBuckets = 3 maxWarmDBCount = 7 maxTotalDataSizeMB = 37500 [idx_eventlog_win] [idx_perfmon_win] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 19500 [idx_api_win] maxHotBuckets = 2 maxWarmDBCount = 3 maxTotalDataSizeMB = 3500 [idx_msad_win] [idx_tih_firewall] maxDataSize = auto maxHotBuckets = 5 maxWarmDBCount = 13 maxTotalDataSizeMB = 73500 [idx_m-tih_fortigate] maxDataSize = auto maxHotBuckets = 5 maxWarmDBCount = 13 maxTotalDataSizeMB = 73500 [idx_m-tih_linux] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 34500 [idx_m-tih_esxi] [vmware-esxilog] [vmware-perf-metrics] datatype = metric [vmware-inv] [vmware-taskevent] [vmware-vclog] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 34500 [idx_m-tih_catchall] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 18500 [idx_m-tih_catchother] [idx_m-tih_other] [idx_m-tih_glpi] [idx_m-tih_glpi_vm] [idx_m-tih_glpi_kb] [idx_m-tih_glpi_sep] [idx_m-tih_glpi_obsolescence] [idx_m-tih_genetec_sc] [idx_ldap] [idx_m-tih_synology] [idx_m-tih_symantec] [idx_m-tih_network] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 2 maxTotalDataSizeMB = 18000 [idx_m-tih_spectrum] maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 2000 [idx_m-tih_s4w] [idx_m-tih_sbc]