You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
186 lines
3.7 KiB
186 lines
3.7 KiB
[default]
|
|
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
|
|
coldPath = volume:secondary/$_index_name/colddb
|
|
homePath = volume:primary/$_index_name/db
|
|
tstatsHomePath = volume:primary/$_index_name/datamodel_summary
|
|
tsidxWritingLevel = 4
|
|
journalCompression = zstd
|
|
enableDataIntegrityControl = 0
|
|
enableTsidxReduction = 0
|
|
archiver.enableDataArchive = 0
|
|
compressRawdata = 1
|
|
enableOnlineBucketRepair = 1
|
|
rtRouterQueueSize =
|
|
rtRouterThreads =
|
|
selfStorageThreads =
|
|
suspendHotRollByDeleteQuery = 0
|
|
syncMeta = 1
|
|
|
|
## Config par defaut UNITEP ##
|
|
maxDataSize = 100
|
|
maxHotBuckets = 1
|
|
maxWarmDBCount = 1
|
|
maxTotalDataSizeMB = 1000
|
|
frozenTimePeriodInSecs = 31536000
|
|
|
|
[idx_m-tic_windows]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 3
|
|
maxWarmDBCount = 7
|
|
maxTotalDataSizeMB = 37500
|
|
|
|
[idx_eventlog_win]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 1
|
|
maxWarmDBCount = 1
|
|
maxTotalDataSizeMB = 6500
|
|
|
|
[idx_perfmon_win]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 4
|
|
maxTotalDataSizeMB = 19500
|
|
|
|
[idx_api_win]
|
|
maxHotBuckets = 20
|
|
|
|
[idx_msad_win]
|
|
maxHotBuckets = 20
|
|
|
|
[idx_tic_firewall]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 5
|
|
maxWarmDBCount = 13
|
|
maxTotalDataSizeMB = 73500
|
|
|
|
[idx_m-tic_fortigate]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 5
|
|
maxWarmDBCount = 13
|
|
maxTotalDataSizeMB = 73500
|
|
|
|
[idx_m-tic_veeam]
|
|
|
|
[idx_m-tic_linux]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 4
|
|
maxTotalDataSizeMB = 34500
|
|
|
|
[idx_metrics_linux]
|
|
datatype = metric
|
|
|
|
# nmon data ingested as metrics
|
|
[os-unix-nmon-metrics]
|
|
disabled = false
|
|
coldPath = volume:secondary/os-unix-nmon-metrics/colddb
|
|
datatype = metric
|
|
homePath = volume:primary/os-unix-nmon-metrics/db
|
|
splitByIndexKeys = metric_name,host
|
|
thawedPath = $SPLUNK_DB/os-unix-nmon-metrics/thaweddb
|
|
repFactor = auto
|
|
maxHotBuckets = 3
|
|
maxWarmDBCount = 7
|
|
maxTotalDataSizeMB = 2000
|
|
|
|
# nmon data ingested as regular events
|
|
[os-unix-nmon-events]
|
|
disabled = false
|
|
coldPath = volume:secondary/os-unix-nmon-events/colddb
|
|
homePath = volume:primary/os-unix-nmon-events/db
|
|
thawedPath = $SPLUNK_DB/os-unix-nmon-events/thaweddb
|
|
repFactor = auto
|
|
|
|
# nmon config ingested as regular events
|
|
[os-unix-nmon-config]
|
|
disabled = false
|
|
coldPath = volume:secondary/os-unix-nmon-config/colddb
|
|
homePath = volume:primary/os-unix-nmon-config/db
|
|
thawedPath = $SPLUNK_DB/os-unix-nmon-config/thaweddb
|
|
repFactor = auto
|
|
|
|
# nmon internal data
|
|
[os-unix-nmon-internal]
|
|
disabled = false
|
|
coldPath = volume:secondary/os-unix-nmon-internal/colddb
|
|
homePath = volume:primary/os-unix-nmon-internal/db
|
|
thawedPath = $SPLUNK_DB/os-unix-nmon-internal/thaweddb
|
|
repFactor = auto
|
|
|
|
[nmon]
|
|
disabled = false
|
|
coldPath = volume:secondary/nmon/colddb
|
|
homePath = volume:primary/nmon/db
|
|
thawedPath = $SPLUNK_DB/nmon/thaweddb
|
|
repFactor = auto
|
|
|
|
[idx_m-tic_esxi]
|
|
|
|
[vmware-esxilog]
|
|
|
|
[vmware-perf-metrics]
|
|
datatype = metric
|
|
|
|
[vmware-inv]
|
|
|
|
[vmware-taskevent]
|
|
|
|
[vmware-vclog]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 4
|
|
maxTotalDataSizeMB = 34500
|
|
|
|
[idx_m-tic_catchall]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 4
|
|
maxTotalDataSizeMB = 18500
|
|
|
|
[idx_m-tic_catchother]
|
|
|
|
[idx_m-tic_other]
|
|
|
|
[idx_m-tic_glpi]
|
|
|
|
[idx_m-tic_glpi_vm]
|
|
|
|
[idx_m-tic_glpi_kb]
|
|
|
|
[idx_m-tic_glpi_sep]
|
|
|
|
[idx_m-tic_glpi_obsolescence]
|
|
|
|
[idx_m-tic_genetec_sc]
|
|
|
|
[idx_awx]
|
|
|
|
[idx_awx_nat]
|
|
|
|
[idx_ldap]
|
|
|
|
[idx_m-tic_synology]
|
|
|
|
[idx_m-tic_symantec]
|
|
|
|
[idx_m-tic_network]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 2
|
|
maxTotalDataSizeMB = 18000
|
|
|
|
[idx_m-tic_spectrum]
|
|
maxHotBuckets = 2
|
|
maxWarmDBCount = 4
|
|
maxTotalDataSizeMB = 2600
|
|
|
|
[idx_m-tic_spectrum_dev]
|
|
maxDataSize = auto
|
|
maxHotBuckets = 3
|
|
maxWarmDBCount = 7
|
|
maxTotalDataSizeMB = 30500
|
|
|
|
[firedalerts]
|
|
|
|
[audiocodes]
|