1
Indexes And Data Management
medium
An administrator is configuring a new index named 'finance' in indexes.conf on a standalone Splunk Enterprise indexer. Company policy requires that no single index may store more than 100 GB of raw data on disk, and the oldest data must be removed automatically once that limit is reached. Which setting should the administrator configure to enforce this hard cap?