[default] thawedPath = $SPLUNK_DB/$_index_name/thaweddb coldPath = volume:secondary/$_index_name/colddb homePath = volume:primary/$_index_name/db tstatsHomePath = volume:primary/$_index_name/datamodel_summary tsidxWritingLevel = 4 journalCompression = zstd enableDataIntegrityControl = 0 enableTsidxReduction = 0 archiver.enableDataArchive = 0 #bucketRebuildMemoryHint = 0 compressRawdata = 1 enableOnlineBucketRepair = 1 rtRouterQueueSize = rtRouterThreads = selfStorageThreads = suspendHotRollByDeleteQuery = 0 syncMeta = 1 ## Config par defaut UNITEP ## maxDataSize = 100 maxHotBuckets = 1 maxWarmDBCount = 1 maxTotalDataSizeMB = 1000 frozenTimePeriodInSecs = 31536000 [idx_m-tit_windows] maxDataSize = auto maxHotBuckets = 3 maxWarmDBCount = 7 maxTotalDataSizeMB = 37500 ###Index dédier au Windows### [idx_eventlog_win] [idx_perfmon_win] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 19500 [idx_api_win] maxHotBuckets = 2 maxWarmDBCount = 3 maxTotalDataSizeMB = 3500 [idx_msad_win] [idx_tit_firewall] maxDataSize = auto maxHotBuckets = 5 maxWarmDBCount = 13 maxTotalDataSizeMB = 73500 [idx_m-tit_fortigate] maxDataSize = auto maxHotBuckets = 5 maxWarmDBCount = 13 maxTotalDataSizeMB = 73500 [idx_m-tit_linux] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 34500 [idx_m-tit_esxi] [vmware-esxilog] [vmware-perf-metrics] datatype = metric [vmware-inv] [vmware-taskevent] [vmware-vclog] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 34500 [idx_m-tit_catchall] maxDataSize = auto maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 18500 [idx_m-tit_catchother] [idx_m-tit_other] [idx_m-tit_glpi] [idx_m-tit_glpi_vm] [idx_m-tit_glpi_kb] [idx_m-tit_glpi_sep] [idx_m-tit_glpi_obsolescence] [idx_m-tit_genetec_sc] [idx_ldap] [idx_m-tit_synology] [idx_m-tit_symantec] [idx_m-tit_network] maxDataSize = auto maxHotBuckets = 1 maxWarmDBCount = 3 maxTotalDataSizeMB = 18000 [idx_m-tit_spectrum] maxHotBuckets = 2 maxWarmDBCount = 4 maxTotalDataSizeMB = 2600 [idx_m-tit_s4w]