Decreasing the data model acceleration range will reduce the disk size requirements for a cluster of
indexers running Splunk Enterprise Security. Data model acceleration creates tsidx files that consume
disk space on the indexers. Reducing the acceleration range will limit the amount of data that is
accelerated and thus save disk space. Setting the cluster search factor or replication factor to N-1 will
not reduce the disk size requirements, but rather increase the risk of data loss. Increasing the
number of buckets per index will also increase the disk size requirements, as each bucket has a
minimum size. For more information, see Data model acceleration and Bucket size in the Splunk
documentation.
