[default]
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
coldPath = volume:secondary/$_index_name/colddb
homePath = volume:primary/$_index_name/db
tstatsHomePath = volume:primary/$_index_name/datamodel_summary
tsidxWritingLevel = 4
journalCompression = zstd
enableDataIntegrityControl = 0
enableTsidxReduction = 0
archiver.enableDataArchive = 0
compressRawdata = 1
enableOnlineBucketRepair = 1
rtRouterQueueSize =
rtRouterThreads =
selfStorageThreads =
suspendHotRollByDeleteQuery = 0
syncMeta = 1    

## Config par defaut UNITEP ##
maxDataSize = 100
maxHotBuckets = 1
maxWarmDBCount = 1
maxTotalDataSizeMB = 1000
frozenTimePeriodInSecs = 31536000

[idx_m-tic_windows]
maxDataSize = auto
maxHotBuckets = 3
maxWarmDBCount = 7
maxTotalDataSizeMB = 37500

[idx_eventlog_win]
maxDataSize = auto
maxHotBuckets = 1
maxWarmDBCount = 1
maxTotalDataSizeMB = 6500

[idx_perfmon_win]
maxDataSize = auto
maxHotBuckets = 2
maxWarmDBCount = 4
maxTotalDataSizeMB = 19500

[idx_api_win]
maxHotBuckets = 20

[idx_msad_win]
maxHotBuckets = 20

[idx_tic_firewall]
maxDataSize = auto
maxHotBuckets = 5
maxWarmDBCount = 13
maxTotalDataSizeMB = 73500

[idx_m-tic_fortigate]
maxDataSize = auto
maxHotBuckets = 5
maxWarmDBCount = 13
maxTotalDataSizeMB = 73500

[idx_m-tic_veeam]

[idx_m-tic_linux]
maxDataSize = auto
maxHotBuckets = 2
maxWarmDBCount = 4
maxTotalDataSizeMB = 34500

[idx_metrics_linux]
datatype = metric

# nmon data ingested as metrics
[os-unix-nmon-metrics]
disabled = false
coldPath = volume:secondary/os-unix-nmon-metrics/colddb
datatype = metric
homePath = volume:primary/os-unix-nmon-metrics/db
splitByIndexKeys = metric_name,host
thawedPath = $SPLUNK_DB/os-unix-nmon-metrics/thaweddb
repFactor = auto
maxHotBuckets = 3
maxWarmDBCount = 7
maxTotalDataSizeMB = 2000

# nmon data ingested as regular events
[os-unix-nmon-events]
disabled = false
coldPath = volume:secondary/os-unix-nmon-events/colddb
homePath = volume:primary/os-unix-nmon-events/db
thawedPath = $SPLUNK_DB/os-unix-nmon-events/thaweddb
repFactor = auto

# nmon config ingested as regular events
[os-unix-nmon-config]
disabled = false
coldPath = volume:secondary/os-unix-nmon-config/colddb
homePath = volume:primary/os-unix-nmon-config/db
thawedPath = $SPLUNK_DB/os-unix-nmon-config/thaweddb
repFactor = auto

# nmon internal data
[os-unix-nmon-internal]
disabled = false
coldPath = volume:secondary/os-unix-nmon-internal/colddb
homePath = volume:primary/os-unix-nmon-internal/db
thawedPath = $SPLUNK_DB/os-unix-nmon-internal/thaweddb
repFactor = auto

[nmon]
disabled = false
coldPath = volume:secondary/nmon/colddb
homePath = volume:primary/nmon/db
thawedPath = $SPLUNK_DB/nmon/thaweddb
repFactor = auto

[idx_m-tic_esxi]

[vmware-esxilog]

[vmware-perf-metrics]
datatype = metric

[vmware-inv]

[vmware-taskevent]

[vmware-vclog]
maxDataSize = auto
maxHotBuckets = 2
maxWarmDBCount = 4
maxTotalDataSizeMB = 34500

[idx_m-tic_catchall]
maxDataSize = auto
maxHotBuckets = 2
maxWarmDBCount = 4
maxTotalDataSizeMB = 18500

[idx_m-tic_catchother]

[idx_m-tic_other]

[idx_m-tic_glpi]

[idx_m-tic_glpi_vm]

[idx_m-tic_glpi_kb]

[idx_m-tic_glpi_sep]

[idx_m-tic_glpi_obsolescence]

[idx_m-tic_genetec_sc]

[idx_awx]

[idx_awx_nat]

[idx_ldap]

[idx_m-tic_synology]

[idx_m-tic_symantec]

[idx_m-tic_network]
maxDataSize = auto
maxHotBuckets = 2
maxWarmDBCount = 2
maxTotalDataSizeMB = 18000

[idx_m-tic_spectrum]
maxHotBuckets = 2
maxWarmDBCount = 4
maxTotalDataSizeMB = 2600

[idx_m-tic_spectrum_dev]
maxDataSize = auto
maxHotBuckets = 3
maxWarmDBCount = 7
maxTotalDataSizeMB = 30500

[firedalerts]

[audiocodes]