topic When I restore a frozen bucket, can I select which index it will be restored to? in Deployment Architecture

When I restore a frozen bucket, can I select which index it will be restored to?

rblalock — Fri, 13 Jan 2017 18:45:43 GMT

I've read this article which tells me how to restore a frozen bucket.
http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Restorearchiveddata

When I restore a frozen bucket, can I select which index it will be restored to? How do I do that?

Re: When I restore a frozen bucket, can I select which index it will be restored to?

apple9211 — Fri, 13 Jan 2017 19:17:00 GMT

There is a thawed path for each index you have defined, so when you move the frozen bucket into the specific thawed path, it will be for that index

Re: When I restore a frozen bucket, can I select which index it will be restored to?

jwelch_splunk — Fri, 13 Jan 2017 19:22:53 GMT

That would be determined by what path you put it in when you thawed it.
/opt/splunk/var/lib/splunk/defaultdb/thaweddb/ would be main
/opt/splunk/var/lib/splunk/cisco/thaweddb/ would be cisco
/opt/splunk/var/lib/splunk/whatever/thaweddb/ would be whatever

At least if I remember right.