# Version 9.2.2.20240415 # DO NOT EDIT THIS FILE! # Please make all changes to files in $SPLUNK_HOME/etc/system/local. # To make changes, copy the section/stanza you want to change from $SPLUNK_HOME/etc/system/default # into ../local and edit there. # # Configuration for KV Store collections # ############## # defaults for all collection ############## [default] type = undefined profilingEnabled = false profilingThresholdMs = 1000 replicate = false replication_dump_strategy = auto replication_dump_maximum_file_size = 10240 [SavedSearchHistory] type = internal_cache [SearchHeadClusterHealthStates] type = internal_cache [SearchHistory] accelerated_fields.history = { "timestamp":1 } [SamlIdpCerts] disabled = true [SSLCertificates] disabled = true [SearchHeadClusterMemberInfo] type = internal_cache [RecentlyViewedKO] [HomePageAdminConfig] [HomePage] # Used as storage for Token authorization [JsonWebTokensV1] disabled = true [Spl2Modules] [Spl2Permissions] [LoggedOutSessionTokens] disabled = true # The unique token uid is stored as _key field.expiration = number field.inserted = number accelerated_fields.ac_inserted = {"inserted" : 1}