Skip to content

Commit 4d7a516

Browse files
authored
Correct docs on DLS bitset cache default values (#86282)
In #50535 (ES v7.6) the default values for the `DocumentSubsetBitsetCache` settings were changed. However, the docs were not updated at that time, and still reflect the old values for these settings
1 parent e692dfe commit 4d7a516

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

docs/reference/settings/security-settings.asciidoc

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -133,14 +133,16 @@ from being configured. Defaults to `true`.
133133
The time-to-live for cached `BitSet` entries for document level security.
134134
Document level security queries may depend on Lucene BitSet objects, and these are
135135
automatically cached to improve performance. Defaults to expire entries that are
136-
unused for `168h` (7 days).
136+
unused for `2h` (2 hours).
137137

138138
`xpack.security.dls.bitset.cache.size`::
139139
(<<static-cluster-setting,Static>>)
140140
The maximum memory usage of cached `BitSet` entries for document level security.
141141
Document level security queries may depend on Lucene BitSet objects, and these are
142-
automatically cached to improve performance. Defaults to `50mb`, after which
143-
least-recently-used entries will be evicted.
142+
automatically cached to improve performance. Can be configured as a raw number
143+
of bytes (such as `200mb` or `1g`) or a percentage of the node's JVM heap
144+
memory (such as `5%`). When the default value is exceeded, the least recently
145+
used entries are evicted. Defaults to `10%` of the heap assigned to the node.
144146

145147
[discrete]
146148
[[token-service-settings]]

0 commit comments

Comments
 (0)