Skip to content

Commit 58636fe

Browse files
authored
Document xpack.security.dls.bitset.cache settings (#44100)
Two new settings were introduced in #43669 (bb130f5) to control the behaviour of the Document Level Security BitSet cache. This change adds documentation for these 2 settings.
1 parent c9a265b commit 58636fe

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

docs/reference/settings/security-settings.asciidoc

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,18 @@ level security].
128128
Set to `false` to prevent document and field level security
129129
from being configured. Defaults to `true`.
130130

131+
`xpack.security.dls.bitset.cache.ttl`::
132+
The time-to-live for cached `BitSet` entries for document level security.
133+
Document level security queries may depend on Lucene BitSet objects, and these are
134+
automatically cached to improve performance. Defaults to expire entries that are
135+
unused for `168h` (7 days).
136+
137+
`xpack.security.dls.bitset.cache.size`::
138+
The maximum memory usage of cached `BitSet` entries for document level security.
139+
Document level security queries may depend on Lucene BitSet objects, and these are
140+
automatically cached to improve performance. Defaults to `50mb`, after which
141+
least-recently-used entries will be evicted.
142+
131143
[float]
132144
[[token-service-settings]]
133145
==== Token service settings

0 commit comments

Comments
 (0)