From 4b50de2e2e5e7cd2b3fc295a11bbc090030f0773 Mon Sep 17 00:00:00 2001 From: Tim Vernum Date: Tue, 16 Jul 2019 16:22:25 +1000 Subject: [PATCH] Document xpack.security.dls.bitset.cache settings (#44400) Two new settings were introduced in #43669 to control the behaviour of the Document Level Security BitSet cache. This change adds documentation for these 2 settings. Backport of: #44100 --- docs/reference/settings/security-settings.asciidoc | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/docs/reference/settings/security-settings.asciidoc b/docs/reference/settings/security-settings.asciidoc index 202768eb2da..722bd7b4c2e 100644 --- a/docs/reference/settings/security-settings.asciidoc +++ b/docs/reference/settings/security-settings.asciidoc @@ -128,6 +128,18 @@ level security]. Set to `false` to prevent document and field level security from being configured. Defaults to `true`. +`xpack.security.dls.bitset.cache.ttl`:: +The time-to-live for cached `BitSet` entries for document level security. +Document level security queries may depend on Lucene BitSet objects, and these are +automatically cached to improve performance. Defaults to expire entries that are +unused for `168h` (7 days). + +`xpack.security.dls.bitset.cache.size`:: +The maximum memory usage of cached `BitSet` entries for document level security. +Document level security queries may depend on Lucene BitSet objects, and these are +automatically cached to improve performance. Defaults to `50mb`, after which +least-recently-used entries will be evicted. + [float] [[token-service-settings]] ==== Token service settings