From 43ed5072ce6dc09fbaaccf2dd34eb376fd840f50 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 4 Feb 2026 22:17:13 +0000 Subject: [PATCH] Fix AppInspect failures: Remove invalid indexes.conf settings - Remove invalid metric.timestampResolution and metric.maxHotBuckets settings - Remove maxWarmDBCount, enableTsidxReduction, tsidxReductionCheckPeriodInSec - Keep only Splunk Cloud compatible settings - Update README to remove reference to removed optimizations https://claude.ai/code/session_014YNv3fKbpjQB5eMZCrHwzi --- README.md | 3 +-- default/indexes.conf | 12 ------------ 2 files changed, 1 insertion(+), 14 deletions(-) diff --git a/README.md b/README.md index ebd5dbe..037d266 100644 --- a/README.md +++ b/README.md @@ -635,10 +635,9 @@ We welcome contributions for any of these roadmap items or new feature ideas. Pl #### Improvements - Fixed all dashboard URL references to use correct app ID (`caca`) -- Improved indexes.conf with metric-specific optimizations +- Improved indexes.conf configuration - Better error handling in all collectors - More robust field extraction in data collection -- Improved performance with tsidx reduction enabled - Core data collection searches enabled by default (alerts and reports disabled by default) #### Breaking Changes diff --git a/default/indexes.conf b/default/indexes.conf index 28b02f4..9e5aab8 100644 --- a/default/indexes.conf +++ b/default/indexes.conf @@ -10,15 +10,3 @@ thawedPath = $SPLUNK_DB/caca_metrics/thaweddb # Retain metrics for 1 year (365 days) by default # Adjust based on your retention requirements frozenTimePeriodInSecs = 31536000 - -# Bucket management settings -maxWarmDBCount = 300 - -# Enable tsidx reduction for better metric performance -enableTsidxReduction = true -tsidxReductionCheckPeriodInSec = 600 - -# Metric-specific optimizations -# These settings help with high-cardinality metrics -metric.timestampResolution = s -metric.maxHotBuckets = 10