Database Server Configurations
Review database server configurations in Cortex XSOAR 6.13.
db.index.entry.disable
Enables/disables index entries. If you set to true, and disable entry indexing, you won’t be able to search entries in the Search everywhere search box, but you will be able to view these entries and have filters on them as usual. Disabling entry indexing saves substantial disk space.
false
DB.IndexBatchTimeout
The time, in milliseconds, for batch workers to wait for the batch to be full, before indexing. If it does not reach the batch size, it will timeout.
100
DB.MaxIndexBatchSize
The maximum number of items allowed for bleve bolt batch indexing. Define the batch size per index (it is more efficient to index in batches).
100
DB.MaxIndexQueueSize
The size of the indexing queue when pushing from a go routine into a queue that indexes the data.
50000
index.mapping.total_fields.limit
The maximum total field count in a query using Elasticsearch. Can be used if you experience feed ingestion issues.
1000
index.query.bool.max_clause_count
The maximum amount of clauses a query can contain. Relevant for Elasticsearch version 5.5x (and below) and 6.0 and later. Can be used if you experience feed ingestion issues.
1024
server.data.limit.message
Changes the following default message NOTE, too much data to present, content was truncated.
This occurs if data is large and the client takes too long to respond when partial data is sent from the server to the client.
N/a
Last updated
Was this helpful?
