Skip to content

Commit

Permalink
Correct docs on DLS bitset cache default values (elastic#86282)
Browse files Browse the repository at this point in the history
In elastic#50535 (ES v7.6) the default values for the
`DocumentSubsetBitsetCache` settings were changed. However, the docs
were not updated at that time, and still reflect the old values for
these settings
  • Loading branch information
tvernum committed May 2, 2022
1 parent a1be71d commit 72ae76d
Showing 1 changed file with 5 additions and 3 deletions.
8 changes: 5 additions & 3 deletions docs/reference/settings/security-settings.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -133,14 +133,16 @@ from being configured. Defaults to `true`.
The time-to-live for cached `BitSet` entries for document level security.
Document level security queries may depend on Lucene BitSet objects, and these are
automatically cached to improve performance. Defaults to expire entries that are
unused for `168h` (7 days).
unused for `2h` (2 hours).

`xpack.security.dls.bitset.cache.size`::
(<<static-cluster-setting,Static>>)
The maximum memory usage of cached `BitSet` entries for document level security.
Document level security queries may depend on Lucene BitSet objects, and these are
automatically cached to improve performance. Defaults to `50mb`, after which
least-recently-used entries will be evicted.
automatically cached to improve performance. Can be configured as a raw number
of bytes (such as `200mb` or `1g`) or a percentage of the node's JVM heap
memory (such as `5%`). When the default value is exceeded, the least recently
used entries are evicted. Defaults to `10%` of the heap assigned to the node.

[discrete]
[[token-service-settings]]
Expand Down

0 comments on commit 72ae76d

Please sign in to comment.