| Setting | Type | Default | Description | Supported Deployments |
|---|---|---|---|---|
admission. | boolean | true | when true, and provisioned bandwidth for the disk corresponding to a store is configured, tokens for elastic work will be limited if disk bandwidth becomes a bottleneck | Advanced/ |
admission. | boolean | false | when true, epoch-LIFO behavior is enabled when there is significant delay in admission | Basic/ |
admission. | duration | 5ms | the delta duration before closing an epoch, for epoch-LIFO admission control ordering | Basic/ |
admission. | duration | 100ms | the duration of an epoch, for epoch-LIFO admission control ordering | Basic/ |
admission. | duration | 105ms | the queue delay encountered by a (tenant,priority) for switching to epoch-LIFO ordering | Basic/ |
admission. | boolean | true | when true, work performed by the KV layer is subject to admission control | Advanced/ |
admission. | boolean | true | when true, work performed by the SQL layer when receiving a KV response is subject to admission control | Basic/ |
admission. | boolean | true | when true, work performed by the SQL layer when receiving a DistSQL response is subject to admission control | Basic/ |
bulkio. | byte size | 128 MiB | target size for individual data files produced during BACKUP | Basic/ |
bulkio. | duration | 5m0s | amount of time after which a read attempt is considered timed out, which causes the backup to fail | Basic/ |
bulkio. | duration | 1m0s | amount of time since the read-as-of time above which a BACKUP should use priority when retrying reads | Basic/ |
bulkio.import.row\_count\_validation.mode | enumeration | off | controls validation of imported data via INSPECT jobs. Options: 'off' (no validation), 'async' (background validation), 'sync' (blocking validation). If disabled, IMPORT will not perform a post-import row count check. \[off = 0, async = 1, sync = 2] | Basic/ |
bulkio. | byte size | 1.0 GiB | target size for individual data files produced during local only merge phases | Basic/ |
physical\_replication.consumer.minimum\_flush\_interval | duration | 5s | the minimum timestamp between flushes; flushes may still occur if internal buffers fill up | Advanced/ |
changefeed. | float | 0.1 | jitter aggregator flushes as a fraction of min\_checkpoint\_frequency. This setting has no effect if min\_checkpoint\_frequency is set to 0. | Basic/ |
changefeed. | integer | 0 | number of concurrent scan requests per node issued during a backfill | Basic/ |
changefeed. | integer | 524288 | the maximum number of bytes returned by each scan request | Basic/ |
changefeed.batch\_reduction\_retry.enabled | boolean | false | if true, kafka changefeeds upon erroring on an oversized batch will attempt to resend the messages with progressively lower batch sizes | Basic/ |
changefeed. | enumeration | default | controls how changefeed work is distributed across nodes. 'default' defers to DistSQL for node selection and work distribution. 'balanced\_simple' uses DistSQL for node selection but then attempts to evenly distribute ranges across those selected nodes for better load balancing. this setting does not override locality restrictions and can be overridden per-changefeed using the 'range\_distribution\_strategy' option. \[default = 0, balanced\_simple = 1] | Basic/ |
changefeed. | integer | 16 | if changefeed.event\_consumer\_workers is enabled, this setting sets the maxmimum number of events which a worker can buffer | Basic/ |
changefeed. | integer | 0 | the number of workers to use when processing events: \<0 disables, 0 assigns a reasonable default, >0 assigns the setting value. for experimental/core changefeeds and changefeeds using parquet format, this is disabled | Basic/ |
changefeed. | boolean | true | use fast gzip implementation | Basic/ |
changefeed.span\_checkpoint.lag\_threshold | duration | 10m0s | the amount of time a changefeed's lagging (slowest) spans must lag behind its leading (fastest) spans before a span-level checkpoint to save leading span progress is written; if 0, span-level checkpoints due to lagging spans is disabled | Basic/ |
changefeed. | byte size | 256 MiB | the maximum number of uncompressed bytes sent in a single request to a Kafka broker; lowering this value helps avoid spurious "message too large" errors that can occur when multiple messages are combined into a single batch; this setting is overridden by the per-changefeed Flush \{ MaxBytes: \ | Basic/ |
changefeed. | boolean | true | if enabled, Kafka v2 sinks will include the message key, size, and MVCC timestamp in message too large errors | Basic/ |
changefeed. | byte size | 512 MiB | controls amount of data that can be buffered per changefeed | Basic/ |
changefeed.resolved\_timestamp.min\_update\_interval | duration | 0s | minimum amount of time that must have elapsed since the last time a changefeed's resolved timestamp was updated before it is eligible to be updated again; default of 0 means no minimum interval is enforced but updating will still be limited by the average time it takes to checkpoint progress | Basic/ |
changefeed. | string | | specifies node level throttling configuration for all changefeeeds | Basic/ |
changefeed. | boolean | false | if enabled, allows specifying the partition\_alg changefeed option to choose between fnv-1a (default) and murmur2 hash functions for Kafka partitioning. Only affects changefeeds using a kafka sink with changefeed.new\_kafka\_sink\_enabled set to true. | Basic/ |
changefeed. | duration | 30s | minimum amount of time that must elapse before a changefeed will persist its entire span frontier again | Basic/ |
changefeed. | duration | 96h0m0s | fail the changefeed if the protected timestamp age exceeds this threshold; 0 disables expiration | Basic/ |
changefeed. | duration | 10m0s | controls how often the changefeed forwards its protected timestamp to the resolved timestamp | Basic/ |
changefeed. | duration | 1m0s | retry with high priority if we were not able to read descriptors for too long; 0 disables | Basic/ |
changefeed. | integer | 0 | the number of workers used by changefeeds when sending requests to the sink (currently the batching versions of webhook, pubsub, and kafka sinks that are enabled by changefeed.new\_\ | Basic/ |
cloudstorage. | integer | 1 | controls the number of concurrent buffers that will be used by the Azure client when uploading chunks.Each buffer can buffer up to cloudstorage.write\_chunk.size of memory during an upload | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | string | | custom root CA (appended to system's default CAs) for verifying certificates when interacting with HTTPS storage | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | duration | 10m0s | the timeout for import/export storage operations | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | burst limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cloudstorage. | byte size | 0 B | limit on number of bytes per second per node across operations writing to the designated cloud storage provider if non-zero | Basic/ |
cluster. | boolean | true | disable automatic cluster version upgrade until reset | Basic/ |
cluster. | string | | organization name | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
cluster. | string | | disable (automatic or manual) cluster version upgrade from the specified version until reset | Basic/ |
debug. | boolean | false | enables the redaction of hostnames and ip addresses in debug zip | Basic/ |
diagnostics. | boolean | true | experimental: enable dumping of anonymized active queries to disk when node is under memory pressure | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
diagnostics. | duration | 2h0m0s | interval after which the reported SQL Stats are reset even if not collected by telemetry reporter. It has a max value of 24H. | Basic/ |
diagnostics. | boolean | true | enable dumping of memory monitoring state at the same time as heap profiles are taken | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
diagnostics. | boolean | true | enable reporting diagnostic metrics to cockroach labs, but is ignored for Trial or Free licenses | Basic/ |
diagnostics. | duration | 1h0m0s | interval at which diagnostics data should be reported | Basic/ |
enterprise. | string | | the encoded cluster license | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
external. | string | | if nonempty, push server metrics to the Graphite or Carbon server at the specified host:port | Basic/ |
external. | duration | 10s | the interval at which metrics are pushed to Graphite (if enabled) | Basic/ |
feature. | boolean | true | set to true to enable backups, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable changefeeds, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable exports, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable imports, false to disable; default is true | Basic/ |
feature. | boolean | false | set to true to enable looking up the region column via a foreign key constraint in a REGIONAL BY ROW table, false to disable; default is false | Basic/ |
feature. | boolean | true | set to true to enable restore, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable schema changes, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable CREATE STATISTICS/ANALYZE, false to disable; default is true | Basic/ |
feature. | boolean | true | set to true to enable vector indexes, false to disable; default is true | Basic/ |
jobs. | duration | 336h0m0s | the amount of time for which records for completed jobs are retained | Basic/ |
kv. | float | 0.05 | minimum fraction away from the mean a store's lease count can be before it is considered for lease-transfers | Advanced/ |
kv. | boolean | true | set to enable rebalancing of range leases based on load and latency; has no effect when kv.allocator.load\_based\_rebalancing is set to 'multi-metric only' or 'multi-metric and count' | Advanced/ |
kv. | enumeration | leases and replicas | whether to rebalance based on the distribution of load across stores \[off = 0, leases = 1, leases and replicas = 2, multi-metric only = 3, multi-metric and count = 4] | Advanced/ |
kv. | enumeration | cpu | what objective does the cluster use to rebalance; if set to `qps` the cluster will attempt to balance qps among stores, if set to `cpu` the cluster will attempt to balance cpu usage among stores \[qps = 0, cpu = 1] | Advanced/ |
kv. | duration | 1m0s | the rough interval at which each store will check for load-based lease / replica rebalancing opportunities | Advanced/ |
kv. | float | 0.1 | minimum fraction away from the mean a store's QPS (such as queries per second) can be before it is considered overfull or underfull | Advanced/ |
kv. | float | 0.05 | minimum fraction away from the mean a store's range count can be before it is considered overfull or underfull | Advanced/ |
kv. | float | 0.1 | minimum fraction away from the mean a store's cpu usage can be before it is considered overfull or underfull | Advanced/ |
kv. | byte size | 1.0 TiB | the rate limit (bytes/sec) to use for writes to disk on behalf of bulk io ops | Advanced/ |
kv. | float | 0.05 | remaining store capacity fraction below which bulk ingestion requests are rejected | Advanced/ |
kv. | byte size | 64 MiB | if positive, allowed size in excess of target size for SSTs from export requests; export requests (i.e. BACKUP) may buffer up to the sum of kv.bulk\_sst.target\_size and kv.bulk\_sst.max\_allowed\_overage in memory | Advanced/ |
kv. | byte size | 16 MiB | target size for SSTs emitted from export requests; export requests (i.e. BACKUP) may buffer up to the sum of kv.bulk\_sst.target\_size and kv.bulk\_sst.max\_allowed\_overage in memory | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv.closed\_timestamp.follower\_reads.enabled | boolean | true | allow (all) replicas to serve consistent historical reads based on closed timestamp information | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | boolean | false | if enabled, observed network latency between leaseholders and their furthest follower will be used to adjust closed timestamp policies for rangesranges configured to serve global reads. kv.closed\_timestamp.lead\_for\_global\_reads\_override takes precedence if set. | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 0s | if nonzero, overrides the lead time that global\_read ranges use to publish closed timestamps | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 200ms | the interval at which the closed timestamp side-transport attempts to advance each range's closed timestamp; set to 0 to disable the side-transport | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 10ms | the refresh interval for the task pacer that controls pacing of sending sidetransport updates to avoid overloading the system when many connections are waiting | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 1ms | the smear interval for the task pacer that controls the amount of time each paced batch is going to take when broadcasting sidetransport updates | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 3s | if nonzero, attempt to provide closed timestamp notifications for timestamps trailing cluster time by approximately this duration | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | boolean | true | when enabled, in-flight requests will be cancelled when the circuit breaker trips | Basic/ |
kv. | duration | 10s | how long after the circuit breaker trips to cancel write requests (these can't retry internally, so should be long enough to allow quorum/lease recovery) | Basic/ |
kv. | duration | 3s | interval between replica probes | Basic/ |
kv. | duration | 3s | duration of errors or stalls after which a replica will be probed | Basic/ |
kv. | duration | 3s | timeout for replica probes | Basic/ |
kv. | enumeration | liveness range only | set of ranges to trip circuit breakers for failing or stalled replicas \[no ranges = 0, liveness range only = 1, all ranges = 2] | Basic/ |
kv. | byte size | 0 B | controls the maximum number of bytes that will be used to summarize the global segment of the timestamp cache during lease transfers and range merges. A smaller budget will result in loss of precision. | Advanced/ |
kv. | byte size | 4.0 MiB | controls the maximum number of bytes that will be used to summarize the local segment of the timestamp cache during lease transfers and range merges. A smaller budget will result in loss of precision. | Advanced/ |
kv. | boolean | true | set to true to transactionally log range events (e.g., split, merge, add/remove voter/non-voter) into system.rangelogand node join and restart events into system.eventolog | Advanced/ |
kv. | duration | 5m0s | the frequency for reconciling jobs with protected timestamp records | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | float | 1 | controls the fraction of ranges for which the raft leader fortification protocol is enabled. Leader fortification is needed for a range to use a Leader lease. Set to 0.0 to disable leader fortification and, by extension, Leader leases. Set to 1.0 to enable leader fortification for all ranges and, by extension, use Leader leases for all ranges which do not require expiration-based leases. Set to a value between 0.0 and 1.0 to gradually roll out Leader leases across the ranges in a cluster. | Advanced/ |
kv. | byte size | 8.0 GiB | hard cap on the maximum size a range is allowed to grow to withoutsplitting before writes to the range are blocked. Takes precedence over all other configurations | Advanced/ |
kv.range\_split.by\_load.enabled | boolean | true | allow automatic splits of ranges based on where load is concentrated | Advanced/ |
kv. | duration | 500ms | the CPU use per second over which, the range becomes a candidate for load based splitting | Advanced/ |
kv. | integer | 2500 | the QPS over which, the range becomes a candidate for load based splitting | Advanced/ |
kv. | integer | 100 | controls the rate per second the client will initiate new rangefeed stream for a single range; 0 implies unlimited | Basic/ |
kv. | duration | 3s | the interval at which closed-timestamp updatesare delivered to rangefeeds; set to 0 to use kv.closed\_timestamp.side\_transport\_interval | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | boolean | false | if set, rangefeed registration is enabled | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
kv. | duration | 1m0s | duration after which slow proposals trip the per-Replica circuit breaker (zero duration disables breakers) | Advanced/ |
| duration | 1m0s | duration after which leaderless replicas is considered unavailable. Set to 0 to disable leaderless replica availability checks | Advanced/ | |
kv. | integer | 50000 | the divisor that is applied to addsstable request sizes, then recorded in a leaseholders QPS; 0 means all requests are treated as cost 1 | Advanced/ |
kv. | duration | 1m0s | the frequency for generating the replication\_constraint\_stats, replication\_stats\_report and replication\_critical\_localities reports (set to 0 to disable) | Advanced/ |
kv. | byte size | 32 MiB | the rate limit (bytes/sec) to use for rebalance and upreplication snapshots | Advanced/ |
kv. | integer | 0 | maximum count of inserts or durable locks for a single transactions, 0 to disable | Basic/ |
kv. | integer | 4194304 | maximum number of bytes used to track locks in transactions | Basic/ |
kv. | integer | 4194304 | maximum number of bytes used to track refresh spans in serializable transactions | Basic/ |
kv. | boolean | false | dictates whether a transactions anchor key is randomized or not | Basic/ |
kv. | boolean | false | if set, transactions that exceed their lock tracking budget (kv.transaction.max\_intents\_bytes) are rejected instead of having their lock spans imprecisely compressed | Basic/ |
kv. | boolean | true | if enabled, transactional writes are buffered on the client | Basic/ |
kv. | byte size | 4.0 MiB | if non-zero, defines that maximum size of the buffer that will be used to buffer transactional writes per-transaction | Basic/ |
kv. | boolean | true | if enabled, transactional locking reads are pipelined through Raft consensus | Basic/ |
kv. | boolean | true | if enabled, transactional ranged writes are pipelined through Raft consensus | Basic/ |
kv.transaction.write\_pipelining.enabled | boolean | true | if enabled, transactional writes are pipelined through Raft consensus | Basic/ |
kv.transaction.write\_pipelining.max\_batch\_size | integer | 128 | if non-zero, defines that maximum size batch that will be pipelined through Raft consensus | Basic/ |
kvadmission. | byte size | 0 B | if set to a non-zero value, this is used as the provisioned bandwidth (in bytes/s), for each store. It can be overridden on a per-store basis using the --store flag. Note that setting the provisioned bandwidth to a positive value may enable disk bandwidth based admission control, since admission.disk\_bandwidth\_tokens.elastic.enabled defaults to true | Advanced/ |
kvadmission. | boolean | true | if set to true, snapshot ingests will be subject to disk write control in AC | Advanced/ |
kvadmission. | boolean | true | if set to true, snapshot ingests will be admitted at a minimum rate when kvadmission.store.provisioned\_bandwidth is set to a non-zero value. Disabling this setting can lead to snapshots being starved out by foreground traffic. | Advanced/ |
log. | boolean | false | when true, logs will to log to their legacy (pre 26.1) logging channels; when false, logs will be logged to new logging channels | Basic/ |
obs. | integer | 1000000 | number of ASH samples to retain in memory | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
obs. | boolean | false | enable active session history sampling | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
obs. | duration | 10m0s | interval between periodic ASH top-N workload summary logs; also used as the lookback window for ASH reports written by the env sampler profiler | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
obs. | integer | 10 | maximum number of entries in periodic ASH workload summary, ranked by sample count descending | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
obs. | integer | 10000 | maximum number of ASH samples returned per node in fan-out responses | Basic/ |
obs. | duration | 1s | interval between ASH samples | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
obs. | boolean | false | enables automatic updates of the table metadata cache system.table\_metadata | Basic/ |
obs. | duration | 20m0s | the duration for which the data in system.table\_metadata is considered valid | Basic/ |
restore. | boolean | false | if enabled, RESTORE will ensure span config conformance before ingestion | Basic/ |
schedules. | boolean | true | enable chaining of GC protection across backups run as part of a schedule | Basic/ |
security. | boolean | false | mandates a requirement for client certs to contain SAN | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
security. | boolean | false | mandates a requirement for subject role to be set for db user | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
security. | enumeration | off | use OCSP to check whether TLS certificates are revoked. If the OCSP server is unreachable, in strict mode all certificates will be rejected and in lax mode all certificates will be accepted. \[off = 0, lax = 1, strict = 2] | Basic/ |
security. | duration | 3s | timeout before considering the OCSP server unreachable | Basic/ |
security. | boolean | false | enables automatic creation of SQL users upon successful LDAP login | Basic/ |
server. | boolean | false | if set, log SQL client connect and disconnect events to the SESSIONS log channel (note: may hinder performance on loaded nodes) | Basic/ |
server. | boolean | false | if set, log verbose SQL session authentication events to the SESSIONS log channel (note: may hinder performance on loaded nodes). Session start and end events are always logged regardless of this setting; disable the SESSIONS log channel to suppress them. | Basic/ |
server. | boolean | true | enables a cache used during authentication to avoid lookups to system tables when retrieving per-user authentication-related information | Basic/ |
server. | boolean | false | enables the exporting of child metrics, additional prometheus time series with extra labels | Basic/ |
server. | boolean | true | include the reporting of the aggregate time series when child metrics are enabled. This cluster setting has no effect if child metrics are disabled. | Basic/ |
server.clock.forward\_jump\_check.enabled | boolean | false | if enabled, forward clock jumps > max\_offset/2 will cause a panic | Basic/ |
server. | duration | 0s | the interval between persisting the wall time upper bound of the clock. The clock does not generate a wall time greater than the persisted timestamp and will panic if it sees a wall time greater than this value. When cockroach starts, it waits for the wall time to catch-up till this persisted timestamp. This guarantees monotonic wall time across server restarts. Not setting this or setting a value of 0 disables this feature. | Basic/ |
server. | byte size | 8.0 MiB | the rate limit (bytes/sec) to use for consistency checks; used in conjunction with server.consistency\_check.interval to control the frequency of consistency checks. Note that setting this too high can negatively impact performance. | Advanced/ |
server. | boolean | true | if set, logged notable events are also stored in the table system.eventlog | Basic/ |
server. | duration | 2160h0m0s | if nonzero, entries in system.eventlog older than this duration are periodically purged | Basic/ |
server. | string | | host-based authentication configuration to use during connection authentication | Basic/ |
server. | duration | 5m0s | the duration allowed for a single node to return hot range data before the request is cancelled; if set to 0, there is no timeout | Basic/ |
server. | boolean | false | if true, HSTS headers will be sent along with all HTTP requests. The headers will contain a max-age setting of one year. Browsers honoring the header will always use HTTPS to access the DB Console. Ensure that TLS is correctly configured prior to enabling. | Basic/ |
server. | string | / | path to redirect the user to upon succcessful login | Basic/ |
server. | string | | system-identity to database-username mappings | Basic/ |
server. | string | | sets accepted audience values for JWT logins over the SQL interface | Basic/ |
server. | string | | sets the JWT claim that is parsed to get the username | Basic/ |
server. | duration | 15s | sets the client timeout for external calls made during JWT authentication (e.g. fetching JWKS, etc.) | Basic/ |
server. | boolean | false | enables or disables JWT login for the SQL interface | Basic/ |
server.jwt\_authentication.issuers.configuration | string | | sets accepted issuer values for JWT logins over the SQL interface which can be a single issuer URL string or a JSON string containing an array of issuer URLs or a JSON object containing map of issuer URLS to JWKS URIs | Basic/ |
server. | string | | sets the PEM encoded custom root CA for verifying certificates while fetching JWKS | Basic/ |
server. | string | \{"keys":\[]} | sets the public key set for JWT logins over the SQL interface (JWKS format) | Basic/ |
server. | boolean | false | enables or disables automatic fetching of JWKS from the issuer's well-known endpoint or JWKS URI set in JWTAuthIssuersConfig. If this is enabled, the server.jwt\_authentication.jwks will be ignored. | Basic/ |
server. | string | | sets the client certificate PEM for establishing mTLS connection with LDAP server | Basic/ |
server. | string | | sets the client key PEM for establishing mTLS connection with LDAP server | Basic/ |
server. | string | | sets the PEM encoded custom root CA for verifying domain certificates when establishing connection with LDAP server | Basic/ |
server. | integer | 1000 | the maximum number of entries to delete on each purge of log-like system tables | Basic/ |
server. | duration | 1h0m0s | the period at which log-like system tables are checked for old entries | Basic/ |
server. | integer | -1 | the maximum number of SQL connections per gateway allowed at a given time (note: this will only limit future connection attempts and will not affect already established connections). Negative values result in unlimited number of connections. Superusers are not affected by this limit. | Basic/ |
server. | integer | -1 | the maximum number of open SQL transactions per gateway allowed at a given time. Negative values result in unlimited number of connections. Superusers are not affected by this limit. | Basic/ |
server.oidc\_authentication.autologin.enabled | boolean | false | if true, logged-out visitors to the DB Console will be automatically redirected to the OIDC login endpoint | Basic/ |
| string | Log in with your OIDC provider | text to show on button on DB Console login page to login with your OIDC provider (only shown if OIDC is enabled) | Basic/ | |
server. | string | | sets JSON key of principal to extract from payload after OIDC authentication completes (usually email or sid) | Basic/ |
server. | duration | 15s | sets the client timeout for external calls made during OIDC authentication (e.g. authorization code flow, etc.) | Basic/ |
server. | string | | sets OIDC client id | Basic/ |
server. | string | | sets OIDC client secret | Basic/ |
server. | boolean | false | enables or disabled OIDC login for the DB Console | Basic/ |
server. | string | (.+) | regular expression to apply to extracted principal (see claim\_json\_key setting) to translate to SQL user (golang regex format, must include 1 grouping to extract) | Basic/ |
server. | string | | sets the PEM encoded custom root CA for verifying certificates while authenticating through the OIDC provider | Basic/ |
server. | string | | sets OIDC provider URL (\{provider\_url}/.well-known/openid-configuration must resolve) | Basic/ |
server. | string | [https://localhost:8080/oidc/v1/callback](https://localhost:8080/oidc/v1/callback) | sets OIDC redirect URL via a URL string or a JSON string containing a required `redirect_urls` key with an object that maps from region keys to URL strings (URLs should point to your load balancer and must route to the path /oidc/v1/callback) | Basic/ |
server. | string | openid | sets OIDC scopes to include with authentication request (space delimited list of strings, required to start with `openid`) | Basic/ |
server. | boolean | false | if true, TLS certificate verification is skipped for connections to the OIDC provider (insecure) | Basic/ |
server. | duration | 720h0m0s | if nonzero, entries in system.rangelog older than this duration are periodically purged | Advanced/ |
server. | boolean | false | enables or disables the redaction of sensitive settings in the output of SHOW CLUSTER SETTINGS and SHOW ALL CLUSTER SETTINGS for users without the MODIFYCLUSTERSETTING privilege | Basic/ |
server.shutdown.connections.timeout | duration | 0s | the maximum amount of time a server waits for all SQL connections to be closed before proceeding with a drain. (note that the --drain-wait parameter for cockroach node drain may need adjustment after changing this setting) | Basic/ |
server.shutdown.initial\_wait | duration | 0s | the amount of time a server waits in an unready state before proceeding with a drain (note that the --drain-wait parameter for cockroach node drain may need adjustment after changing this setting. --drain-wait is to specify the duration of the whole draining process, while server.shutdown.initial\_wait is to set the wait time for health probes to notice that the node is not ready.) | Basic/ |
server.shutdown.lease\_transfer\_iteration.timeout | duration | 5s | the timeout for a single iteration of the range lease transfer phase of draining (note that the --drain-wait parameter for cockroach node drain may need adjustment after changing this setting) | Advanced/ |
server.shutdown.transactions.timeout | duration | 10s | the timeout for waiting for active transactions to finish during a drain (note that the --drain-wait parameter for cockroach node drain may need adjustment after changing this setting) | Basic/ |
server. | integer | 3 | maximum number of probes that will be sent out before a connection is dropped because it's unresponsive (Linux and Darwin only). The value 0 is the operating system default. | Basic/ |
server. | duration | 0s | time with no network activity before sending a TCP keepalive probe (Linux and Darwin only). If 0, the value of server.sql\_tcp\_keep\_alive.interval is used. The value 0 is the operating system default. | Basic/ |
server. | duration | 10s | time between keep alive probes and idle time before probes are sent out. The value 0 is the operating system default. | Basic/ |
server. | duration | 0s | specifies the maximum amount of time that transmitted data can remain unacknowledged before the underlying TCP connection is forcefully closed. (Linux and Darwin only). The value 0 is the operating system default. | Basic/ |
server. | duration | 5m0s | the time after which if there is no new gossiped information about a store, it is considered dead | Basic/ |
server. | boolean | true | whether to automatically promote cert-password authentication to use SCRAM | Basic/ |
server. | boolean | true | if server.user\_login.password\_encryption=crdb-bcrypt, this controls whether to automatically re-encode stored passwords using scram-sha-256 to crdb-bcrypt | Basic/ |
server. | integer | 1 | the minimum length accepted for passwords set in cleartext via SQL. Note that a value lower than 1 is ignored: passwords cannot be empty in any case. This setting only applies when adding new users or altering an existing user's password; it will not affect existing logins. | Basic/ |
server. | enumeration | scram-sha-256 | which hash method to use to encode cleartext passwords passed via ALTER/CREATE USER/ROLE WITH PASSWORD \[crdb-bcrypt = 2, scram-sha-256 = 3] | Basic/ |
server. | integer | 10 | the hashing cost to use when storing passwords supplied as cleartext by SQL clients with the hashing method crdb-bcrypt (allowed range: 4-31) | Basic/ |
server. | integer | 10610 | the hashing cost to use when storing passwords supplied as cleartext by SQL clients with the hashing method scram-sha-256 (allowed range: 4096-240000000000) | Basic/ |
server. | boolean | true | if server.user\_login.password\_hashes.default\_cost.scram\_sha\_256 differs from, the cost in a stored hash, this controls whether to automatically re-encode stored passwords using scram-sha-256 with the new default cost | Basic/ |
server. | duration | 10s | timeout after which client authentication times out if some system range is unavailable (0 = no timeout) | Basic/ |
server. | boolean | true | if server.user\_login.password\_encryption=scram-sha-256, this controls whether to automatically re-encode stored passwords using crdb-bcrypt to scram-sha-256 | Basic/ |
server. | duration | 1h0m0s | if nonzero, entries in system.web\_sessions older than this duration are periodically purged | Basic/ |
server.web\_session.timeout | duration | 168h0m0s | the duration that a newly created web session will be valid | Basic/ |
spanconfig. | boolean | true | dictates whether span config bounds are consulted when serving span configs for secondary tenants | Advanced/ |
spanconfig.range\_coalescing.system.enabled | boolean | true | collapse adjacent ranges with the same span configs, for the ranges specific to the system tenant | Advanced/ |
spanconfig.range\_coalescing.application.enabled | boolean | true | collapse adjacent ranges with the same span configs across all secondary tenant keyspaces | Advanced/ |
sql. | boolean | false | controls whether a user is allowed to change their own password, even if they have no other privileges | Basic/ |
sql. | boolean | true | determines whether the GRANT OPTION for privileges is implicitly given to the owner of an object | Basic/ |
sql. | boolean | true | determines whether the GRANT OPTION for privileges is inherited through role membership | Basic/ |
sql. | boolean | true | determines whether to grant all users the CREATE privileges on the public schema when it is created | Basic/ |
sql. | boolean | false | determines whether to skip privilege checks on tables underlying views. When enabled, users with SELECT privileges on a view can query it regardless of their privileges on the underlying tables, and row-level security policies are evaluated as the invoking user rather than the view owner. This restores pre-v26.2 behavior. | Basic/ |
sql. | boolean | true | if true, catalog views (crdb\_internal, information\_schema, pg\_catalog) can use leased descriptors for improved performance | Basic/ |
sql. | integer | 1000 | the maximum number of sessions in the cache | Basic/ |
sql. | integer | 3600 | the maximum time to live, in seconds | Basic/ |
sql. | byte size | 64 MiB | the in-memory storage capacity per-node of contention event store | Basic/ |
sql. | duration | 0s | minimum contention duration to cause the contention events to be collected into crdb\_internal.transaction\_contention\_events | Basic/ |
sql. | boolean | true | enables recording 40001 errors with conflicting txn meta as SERIALIZATION\_CONFLICTcontention events into crdb\_internal.transaction\_contention\_events | Basic/ |
sql. | byte size | 64 MiB | the maximum byte size TxnID cache will use (set to 0 to disable) | Basic/ |
sql. | boolean | false | if true, creating foreign key references across databases is allowed | Basic/ |
sql. | boolean | false | if true, creating sequences owned by tables from other databases is allowed | Basic/ |
sql. | boolean | false | if true, sequences referenced by tables from other databases are allowed | Basic/ |
sql. | boolean | false | if true, creating views that refer to other databases is allowed | Basic/ |
sql. | boolean | false | setting to true uses the same size for all columns to compute scan cost This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | iso, mdy | default value for DateStyle session setting \[iso, mdy = 0, iso, dmy = 1, iso, ymd = 2] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 16 | used as bucket count if bucket count is not specified in hash sharded index definition This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 8 | the size, in bytes, of an INT type This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | setting to true rejects queries that have planned a full table scan; set large\_full\_scan\_rows > 0 to allow small full table scans estimated to read fewer than large\_full\_scan\_rows This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | auto | default distributed SQL execution mode \[off = 0, auto = 1, on = 2, always = 3] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for experimental\_alter\_column\_type session setting; enables the use of ALTER COLUMN TYPE for general conversions This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | off | default experimental\_distsql\_planning mode; enables experimental opt-driven DistSQL planning \[off = 0, on = 1] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for experimental\_enable\_unique\_without\_index\_constraints session setting;disables unique without index constraints by default This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for experimental\_enable\_temp\_tables; allows for the use of implicit column partitioning This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for experimental\_enable\_temp\_tables; allows for use of temporary tables by default This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 10000 | default value for foreign\_key\_cascades\_limit session setting; limits the number of cascading operations that run as part of a single query This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | duration | 0s | default value for the idle\_in\_session\_timeout; default value for the idle\_in\_session\_timeout session setting; controls the duration a session is permitted to idle before the session is terminated; if set to 0, there is no timeout This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | duration | 0s | default value for the idle\_in\_transaction\_session\_timeout; controls the duration a session is permitted to idle in a transaction before the session is terminated; if set to 0, there is no timeout This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for enable\_implicit\_select\_for\_update session setting; enables FOR UPDATE locking during the row-fetch phase of mutation statements This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for enable\_insert\_fast\_path session setting; enables a specialized insert path This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | postgres | default value for IntervalStyle session setting \[postgres = 0, iso\_8601 = 1, sql\_standard = 2] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | float | 0 | default value for large\_full\_scan\_rows session variable which determines the table size at which full scans are considered large and disallowed when disallow\_full\_table\_scans is set to true; set to 0 to reject all full table or full index scans when disallow\_full\_table\_scans is true This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for locality\_optimized\_partitioned\_index\_scan session setting; enables searching for rows in the current region before searching remote regions This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | duration | 0s | default value for the lock\_timeout; default value for the lock\_timeout session setting; controls the duration a query is permitted to wait while attempting to acquire a lock on a key or while blocking on an existing lock in order to perform a non-locking read on a key; if set to 0, there is no timeout This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for on\_update\_rehome\_row; enables ON UPDATE rehome\_row() expressions to trigger on updates This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for optimizer\_use\_histograms session setting; enables usage of histograms in the optimizer by default This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for optimizer\_use\_multicol\_stats session setting; enables usage of multi-column stats in the optimizer by default This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for override\_alter\_primary\_region\_in\_super\_region; allows for altering the primary region even if the primary region is a member of a super region This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for override\_multi\_region\_zone\_config; allows for overriding the zone configs of a multi-region table or database This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for prefer\_lookup\_joins\_for\_fks session setting; causes foreign key operations to use lookup joins when possible This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | string | | if not empty, all databases created without a PRIMARY REGION will implicitly have the given PRIMARY REGION This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 8 | default number of joins to reorder This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for requiring explicit primary keys in CREATE TABLE statements This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | byte size | 512 KiB | default size of the buffer that accumulates results for a statement or a batch of statements before they are sent to the client. This can be overridden on an individual connection with the 'results\_buffer\_size' parameter. Note that auto-retries generally only happen while no results have been delivered to the client, so reducing this size can increase the number of retriable errors a client receives. On the other hand, increasing the buffer size can increase the delay until the client receives the first result row. Updating the setting only affects new connections. Setting to 0 disables any buffering. This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | rowid | default handling of SERIAL in table definitions \[rowid = 0, virtual\_sequence = 1, sql\_sequence = 2, sql\_sequence\_cached = 3, unordered\_rowid = 4, sql\_sequence\_cached\_node = 5] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | duration | 0s | default value for the statement\_timeout; default value for the statement\_timeout session setting; controls the duration a query is permitted to run before it is canceled; if set to 0, there is no timeout This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | true | default value for stub\_catalog\_tables session setting This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 0 | the limit for the number of rows read by a SQL transaction which - once exceeded - will fail the transaction (or will trigger a logging event to SQL\_INTERNAL\_PERF for internal transactions); use 0 to disable This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 0 | the threshold for the number of rows read by a SQL transaction which - once exceeded - will trigger a logging event to SQL\_PERF (or SQL\_INTERNAL\_PERF for internal transactions); use 0 to disable This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 0 | the limit for the number of rows written by a SQL transaction which - once exceeded - will fail the transaction (or will trigger a logging event to SQL\_INTERNAL\_PERF for internal transactions); use 0 to disable This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | integer | 0 | the threshold for the number of rows written by a SQL transaction which - once exceeded - will trigger a logging event to SQL\_PERF (or SQL\_INTERNAL\_PERF for internal transactions); use 0 to disable This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | on | default value for use\_declarative\_schema\_changer session setting;disables new schema changer by default \[off = 0, on = 1, unsafe = 2, unsafe\_always = 3] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | enumeration | on | default vectorize mode \[on = 0, on = 1, on = 2, experimental\_always = 3, off = 4] This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | boolean | false | default value for enable\_zigzag\_join session setting; disallows use of zig-zag join by default This cluster setting is being kept to preserve backwards-compatibility. This session variable default should now be configured using ALTER ROLE... SET | Basic/ |
sql. | byte size | 64 MiB | maximum amount of memory in bytes a processor can use before falling back to temp storage | Basic/ |
sql. | byte size | 80 MiB | maximum size of row (or column family if multiple column families are in use) that SQL can write to the database, above which an error is returned; use 0 to disable | Basic/ |
sql. | byte size | 16 MiB | maximum size of row (or column family if multiple column families are in use) that SQL can write to the database, above which an event is logged to SQL\_PERF (or SQL\_INTERNAL\_PERF if the mutating statement was internal); use 0 to disable | Basic/ |
sql. | integer | 16 | max pre-split ranges to have when adding hash sharded index to an existing table | Basic/ |
sql. | duration | 168h0m0s | the index unused duration at which we begin to recommend dropping the index | Basic/ |
sql. | boolean | true | enable per-fingerprint latency recording and anomaly detection | Basic/ |
sql. | duration | 50ms | statements must surpass this threshold to trigger anomaly detection and identification | Basic/ |
sql. | byte size | 1.0 MiB | the maximum amount of memory allowed for tracking statement latencies | Basic/ |
sql. | integer | 1000 | the size of the per-node store of execution insights | Basic/ |
sql. | integer | 10 | the number of retries a slow statement must have undergone for its high retry count to be highlighted as a potential problem | Basic/ |
sql. | duration | 100ms | amount of time after which an executing statement is considered slow. Use 0 to disable. | Basic/ |
sql. | boolean | false | if set, schema object identifers are redacted in SQL statements that appear in event logs | Basic/ |
sql. | boolean | false | when set to true, log a warning when a scan's actual row count differs significantly from the optimizer's estimate | Basic/ |
sql. | boolean | false | when set to true, statements that perform a full table/index scan will be logged to the slow query log even if they do not meet the latency threshold. Must have the slow query log enabled for this setting to have any effect. | Basic/ |
sql. | boolean | false | when set to true, internal queries which exceed the slow query log threshold are logged to a separate log. Must have the slow query log enabled for this setting to have any effect. | Basic/ |
sql. | duration | 0s | when set to non-zero, log statements whose service latency exceeds the threshold to a secondary logger on each node | Basic/ |
sql. | string | | user/role-based audit logging configuration | Basic/ |
sql. | boolean | false | enables logic to compute a reduced audit configuration, computing the audit configuration only once at session start instead of at each SQL event. The tradeoff with the increase in performance (\~5%), is that changes to the audit configuration (user role memberships/cluster setting) are not reflected within session. Users will need to start a new session to see these changes in their auditing behaviour. | Basic/ |
sql. | boolean | false | when enabled, SQL metrics would export application name as and additional label as part of child metrics. The number of unique label combinations is limited to 5000 by default. | Basic/ |
sql. | boolean | false | when enabled, SQL metrics would export database name as and additional label as part of child metrics. The number of unique label combinations is limited to 5000 by default. | Basic/ |
sql. | boolean | true | collect per index usage statistics | Basic/ |
sql. | integer | 100000 | the maximum number of reported statement fingerprints stored in memory | Basic/ |
sql. | integer | 100000 | the maximum number of reported transaction fingerprints stored in memory | Basic/ |
sql. | integer | 7500 | the maximum number of statement fingerprints stored in memory | Basic/ |
sql. | integer | 7500 | the maximum number of transaction fingerprints stored in memory | Basic/ |
sql.metrics.statement\_details.dump\_to\_logs.enabled | boolean | false | dump collected statement statistics to node logs when periodically cleared | Basic/ |
sql. | boolean | true | collect per-statement query statistics | Basic/ |
sql. | boolean | false | save the gateway node for each statement fingerprint. If false, the value will be stored as 0. | Basic/ |
sql. | boolean | true | generate an index recommendation for each fingerprint ID | Basic/ |
sql. | integer | 5000 | the maximum number of reported index recommendation info stored in memory | Basic/ |
sql. | duration | 0s | minimum execution time to cause statement statistics to be collected. If configured, no transaction stats are collected. | Basic/ |
sql. | boolean | true | collect per-application transaction statistics | Basic/ |
sql. | boolean | false | if true, allow statements containing multiple INSERT ON CONFLICT, UPSERT, UPDATE, or DELETE subqueries modifying the same table, at the risk of data corruption if the same row is modified multiple times by a single statement (multiple INSERT subqueries without ON CONFLICT cannot cause corruption and are always allowed) | Basic/ |
sql. | boolean | true | allows dropping the PRIMARY REGION of a database if it is the last region | Basic/ |
sql. | boolean | true | enable notices in the server/client protocol being sent | Basic/ |
sql. | boolean | false | if enabled, uniqueness checks may be planned for mutations of UUID columns updated with gen\_random\_uuid(); otherwise, uniqueness is assumed due to near-zero collision probability | Basic/ |
sql. | integer | 20000 | approximate maximum number of schema objects allowed in the cluster; the check uses cached statistics, so the actual count may slightly exceed this limit; set to 0 to disable | Basic/ |
sql. | boolean | true | controls whether DDL operations will attempt to automatically unlock and re-lock schema\_locked tables. When this setting is false, DDL on schema\_locked tables is blocked unless the user manually unlocks the table first. The schema\_locked storage parameter improves changefeed performance by locking the table's schema from the perspective of the changefeed. | Basic/ |
sql. | string | @weekly | cron-tab recurrence for SQL schema telemetry job | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
sql. | boolean | false | enables the use of certain experimental box2d comparison operators | Basic/ |
sql. | boolean | false | enables support for sqlcommenter. Key value parsed from sqlcommenter comments will be included in sql insights and sql logs. See [https://google.github.io/sqlcommenter/](https://google.github.io/sqlcommenter/) for more details. | Basic/ |
sql. | integer | 200000 | maximum number of rows of statement and transaction activity that will be persisted in the system tables | Basic/ |
sql. | boolean | true | automatic statistics collection mode | Basic/ |
sql. | float | 0.2 | target fraction of stale rows per table that will trigger a statistics refresh | Basic/ |
sql. | integer | 500 | target minimum number of stale rows per table that will trigger a statistics refresh | Basic/ |
sql. | integer | 128 | determines the maximum number of concurrent automatic partial USING EXTREMES table statistics collection jobs | Basic/ |
sql. | boolean | true | automatic full statistics collection mode | Basic/ |
sql. | integer | See description. | determines the maximum number of concurrent automatic full table statistics collection jobs. The default value is computed as the number of vCPUs in a node divided by 2. | Basic/ |
sql. | boolean | true | automatic partial statistics collection mode | Basic/ |
sql. | float | 0.05 | target fraction of stale rows per table that will trigger a partial statistics refresh | Basic/ |
sql. | integer | 100 | target minimum number of stale rows per table that will trigger a partial statistics refresh | Basic/ |
sql. | float | 0 | probability that table statistics will use canary mode instead of stable mode for query planning \[0.0-1.0] | Basic/ |
sql. | string | @hourly | cron-tab recurrence for SQL Stats cleanup job | Basic/ |
sql. | boolean | false | label latency metrics with the statement fingerprint. Workloads with tens of thousands of distinct query fingerprints should leave this setting false. (experimental, affects performance for workloads with high fingerprint cardinality) | Basic/ |
sql. | boolean | false | set to true to error on concurrent CREATE STATISTICS jobs, instead of skipping them | Basic/ |
sql. | boolean | true | if set, SQL execution statistics are periodically flushed to disk | Basic/ |
sql. | duration | 10m0s | the interval at which SQL execution statistics are flushed to disk, this value must be less than or equal to 1 hour | Basic/ |
sql. | boolean | true | when true, enables generation of statistics forecasts by default for all tables | Basic/ |
sql. | float | 0.3333333333333333 | the most a prediction is allowed to decrease, expressed as the minimum ratio of the prediction to the lowest prior observation | Basic/ |
sql. | float | 0.95 | the minimum R² (goodness of fit) measurement required from all predictive models to use a forecast | Basic/ |
sql. | integer | 3 | the mimimum number of observed statistics required to produce a statistics forecast | Basic/ |
sql. | integer | 200 | maximum number of histogram buckets to build during table statistics collection | Basic/ |
sql. | boolean | true | whether to include most common values as histogram buckets | Basic/ |
sql. | float | 0.1 | maximum fraction of histogram buckets to use for most common values | Basic/ |
sql. | boolean | true | histogram collection mode | Basic/ |
sql. | integer | 0 | number of rows sampled for histogram construction during table statistics collection. Not setting this or setting a value of 0 means that a reasonable sample size will be automatically picked based on the table size. | Basic/ |
sql. | boolean | true | multi-column statistics collection mode | Basic/ |
sql. | duration | 24h0m0s | minimum retention period for table statistics collected on non-default columns | Basic/ |
sql. | boolean | false | set to true to collect table statistics histograms on non-indexed JSON columns | Basic/ |
sql. | integer | 1000000 | maximum number of rows of statement and transaction statistics that will be persisted in the system tables before compaction begins | Basic/ |
sql. | boolean | false | if set, an event is logged for every successful CREATE STATISTICS job | Basic/ |
sql. | integer | 20000 | the maximum number of statements and transaction stats returned in a CombinedStatements request | Basic/ |
sql. | boolean | false | controls if statistics for internal executions should be returned by the CombinedStatements and if internal sessions should be returned by the ListSessions endpoints. These endpoints are used to display statistics on the SQL Activity pages | Basic/ |
sql. | boolean | true | when true, enables use of statistics on system tables by the query optimizer | Basic/ |
sql. | boolean | true | when true, enables automatic collection of statistics on system tables | Basic/ |
sql. | integer | 256 | the maximum number of table statistics entries stored in the LRU cache. Each cache entry corresponds to a single table. | Basic/ |
sql. | boolean | true | set to true to collect table statistics on virtual computed columns | Basic/ |
sql. | boolean | false | when set to true, executed queries will emit an event on the telemetry logging channel | Basic/ |
sql. | boolean | false | when set to true, internal queries will be sampled in telemetry logging | Basic/ |
sql. | integer | 8 | the max event frequency (events per second) at which we sample executions for telemetry, note that it is recommended that this value shares a log-line limit of 10 logs per second on the telemetry pipeline with all other telemetry events. If sampling mode is set to 'transaction', this value is ignored. | Basic/ |
sql. | enumeration | statement | the execution level used for telemetry sampling. If set to 'statement', events are sampled at the statement execution level. If set to 'transaction', events are sampled at the transaction execution level, i.e. all statements for a transaction will be logged and are counted together as one sampled event (events are still emitted one per statement). \[statement = 0, transaction = 1] | Basic/ |
sql. | integer | 8 | the max event frequency (events per second) at which we sample transactions for telemetry. If sampling mode is set to 'statement', this setting is ignored. In practice, this means that we only sample a transaction if 1/max\_event\_frequency seconds have elapsed since the last transaction was sampled. | Basic/ |
sql. | integer | 50 | the maximum number of statement events to log for every sampled transaction. Note that statements that are logged by force do not adhere to this limit. | Basic/ |
sql. | duration | 30m0s | how often to clean up orphaned temporary objects | Basic/ |
sql. | duration | 30m0s | how long after creation a temporary object will be cleaned up | Basic/ |
sql.log.all\_statements.enabled | boolean | false | set to true to enable logging of all executed statements | Basic/ |
sql. | duration | 0s | enables tracing on all statements; statements executing for longer than this duration will have their trace logged (set to 0 to disable); note that enabling this may have a negative performance impact; this setting applies to individual statements within a transaction and is therefore finer-grained than sql.trace.txn.enable\_threshold | Basic/ |
sql. | duration | 0s | enables transaction traces for transactions exceeding this duration, used with `sql.trace.txn.sample_rate` | Basic/ |
sql. | boolean | true | enables tracing internal transactions as well as external workload using sample rate and threshold settings | Basic/ |
sql. | boolean | false | enables Jaeger JSON output for transaction traces in logs | Basic/ |
sql. | float | 1 | enables probabilistic transaction tracing. It should be used in conjunction with `sql.trace.txn.enable_threshold`. A percentage of transactions between 0 and 1.0 will have tracing enabled, and only those which exceed the configured threshold will be logged. | Basic/ |
sql. | boolean | false | if true, deletes issued by TTL will not be replicated via changefeeds (this setting will be ignored by changefeeds that have the ignore\_disable\_changefeed\_replication option set; such changefeeds will continue to replicate all TTL deletes) | Basic/ |
sql. | integer | 100 | default amount of rows to delete in a single query during a TTL job | Basic/ |
sql. | integer | 100 | default delete rate limit (rows per second) per node for each TTL job. Use 0 to signify no rate limit. | Basic/ |
sql. | integer | 500 | default amount of rows to select in a single query during a TTL job | Basic/ |
sql. | integer | 0 | default select rate limit (rows per second) per node for each TTL job. Use 0 to signify no rate limit. | Basic/ |
sql. | boolean | true | whether the TTL job is enabled | Basic/ |
sql. | boolean | true | set to true to allow transactions to use the READ COMMITTED isolation level if specified by BEGIN/SET commands | Basic/ |
sql.txn.repeatable\_read\_isolation.enabled | boolean | false | set to true to allow transactions to use the REPEATABLE READ isolation level if specified by BEGIN/SET commands | Basic/ |
sql. | integer | 100 | the maximum number of txn fingerprint IDs stored | Basic/ |
sql. | duration | 100ms | amount of time before other vector index workers will assist with a stalled background fixup | Basic/ |
storage. | boolean | true | set to false to direct Pebble to not partially excise sstables in delete-only compactions | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
storage. | boolean | true | set to false to disable ingest-time splitting that lowers write-amplification | Advanced/ |
storage. | boolean | true | set to true to enable writing of value blocks in ingestion sstables | Basic/ |
storage. | duration | 20s | maximum duration for disk operations; any operations that take longer than this setting trigger a warning log entry or process crash | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
storage. | boolean | true | if true, fatal the process when a disk operation exceeds storage.max\_sync\_duration | Basic/ |
storage. | enumeration | fastest | determines the compression algorithm to use for Pebble stores \[snappy = 1, zstd = 2, none = 3, minlz = 4, fastest = 5, balanced = 6, good = 7, fast = 8] | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
storage. | enumeration | fastest | determines the compression algorithm to use when compressing sstable data blocks for backup row data storage (fast,balanced,good are experimental); \[snappy = 1, zstd = 2, none = 3, minlz = 4, fastest = 5, fast = 6, balanced = 7, good = 8] | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
storage. | enumeration | fastest | determines the compression algorithm to use when compressing sstable data blocks for backup transport (fast,balanced,good are experimental); \[snappy = 1, zstd = 2, none = 3, minlz = 4, fastest = 5, fast = 6, balanced = 7, good = 8] | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
storage. | duration | 20s | duration for disk write operations, beyond which the disk will be reported as unhealthy for higher layer actions | Advanced/ |
storage. | duration | 100ms | the latency of a WAL write considered unhealthy and triggers a failover to a secondary WAL location | Advanced/ |
timeseries. | boolean | true | if set, periodic timeseries data is stored within the cluster; disabling is not recommended unless you are storing the data elsewhere | Advanced/ |
timeseries. | duration | 240h0m0s | the maximum age of time series data stored at the 10 second resolution. Data older than this is subject to rollup and deletion. | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
timeseries. | duration | 240h0m0s | the maximum age of time series data stored at the 1 minute resolution. Data older than this is subject to rollup and deletion. | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
timeseries. | duration | 2160h0m0s | the maximum age of time series data stored at the 30 minute resolution. Data older than this is subject to deletion. | Advanced/Self-hosted (read-write); Basic/Standard (read-only) |
trace.debug\_http\_endpoint.enabled | boolean | false | if set, traces for recent requests can be seen at https\://\ | Basic/ |
trace. | string | | address of an OpenTelemetry trace collector to receive traces using the otel gRPC protocol, as \ | Basic/ |
trace. | duration | 0s | if non-zero, interval at which background trace snapshots are captured | Basic/ |
trace. | boolean | false | if set, ongoing traces can be seen at https\://\ | Basic/ |
trace. | string | | the address of a Zipkin instance to receive traces, as \ | Basic/ |
ui. | boolean | true | if enabled shows extended locality data about databases and tables in DB Console which can be expensive to compute | Basic/ |
ui. | string | | the default timezone used to format timestamps in the ui | Basic/ |
ui. | enumeration | etc/ | the timezone used to format timestamps in the ui. This setting is deprecatedand will be removed in a future version. Use the 'ui.default\_timezone' setting instead. 'ui.default\_timezone' takes precedence over this setting. \[etc/utc = 0, america/new\_york = 1] | Basic/ |
version | version | 26.2 | set the active cluster version in the format '\ | Basic/ |