|
@@ -56,7 +56,7 @@ locals {
|
|
|
"/var/log": 8, # minimum: 8
|
|
|
"/var/log/audit": 8, # minimum: 8
|
|
|
"/tmp": 4, # minimum: 4
|
|
|
- "/opt/splunk": 30, # No minimum; not in base image
|
|
|
+ "/opt/splunk": 60, # No minimum; not in base image
|
|
|
},
|
|
|
# qcompliance, fm-shared-search, and the monitoring console are all searchheads
|
|
|
# "qcompliance" = {
|