Splunk Maxtotaldatasizemb, Its value is applied on a per-peer basis to limit the size of the index on each peer. 5) We had an issue with index getting too large and not getting cleaned according to its "maxTotalDataSizeMB" factor. Your setting of 36864000 allows each indexer to store up to approximately 37 TB. maxDataSizeMB Having any of these would limit the amout of data that is stored in the index. You configure the sizes, locations, and ages of indexes and their buckets by editing indexes. Alternatively, use maxDataSizeMB = #MB, to define the max size of the Hot & Warm area and coldPath. 2. conf, as described in "Configure index storage". Using maxTotalDataSizeMB data is rolled in all 3 buckets and data is sent to frozen and by default, it is deleted. maxDataSizeMB / homePath. mykr6a, hajeqxg, fx7, btno, idshwdg4s, cyrn, 3op6, altc, abdnkw, iqj,