Skip to content

Commit 4b50de2

Browse files
authored
Document xpack.security.dls.bitset.cache settings (#44400)
Two new settings were introduced in #43669 to control the behaviour of the Document Level Security BitSet cache. This change adds documentation for these 2 settings. Backport of: #44100
1 parent 673c63b commit 4b50de2

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

docs/reference/settings/security-settings.asciidoc

+12
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,18 @@ level security].
128128
Set to `false` to prevent document and field level security
129129
from being configured. Defaults to `true`.
130130

131+
`xpack.security.dls.bitset.cache.ttl`::
132+
The time-to-live for cached `BitSet` entries for document level security.
133+
Document level security queries may depend on Lucene BitSet objects, and these are
134+
automatically cached to improve performance. Defaults to expire entries that are
135+
unused for `168h` (7 days).
136+
137+
`xpack.security.dls.bitset.cache.size`::
138+
The maximum memory usage of cached `BitSet` entries for document level security.
139+
Document level security queries may depend on Lucene BitSet objects, and these are
140+
automatically cached to improve performance. Defaults to `50mb`, after which
141+
least-recently-used entries will be evicted.
142+
131143
[float]
132144
[[token-service-settings]]
133145
==== Token service settings

0 commit comments

Comments
 (0)