<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: moving data from hot/warm to cold DB in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693523#M115282</link>
    <description>&lt;P&gt;Make sure all you path are correct.&amp;nbsp; &amp;nbsp;Has this worked before?&lt;/P&gt;&lt;P&gt;You should also set the hot volume&amp;nbsp; to not be able to take all the disk volume.&lt;/P&gt;&lt;P&gt;Eks if you have 2TB of Hot/Warm disk, use some like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;[volume:hot]
path = /data/splunk/index/hot/vol
maxVolumeDataSizeMB = 1900000&lt;/LI-CODE&gt;</description>
    <pubDate>Tue, 16 Jul 2024 19:16:48 GMT</pubDate>
    <dc:creator>jotne</dc:creator>
    <dc:date>2024-07-16T19:16:48Z</dc:date>
    <item>
      <title>moving data from hot/warm to cold DB</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693451#M115273</link>
      <description>&lt;P&gt;i'm facing problem with the storage of splunk i tried multiple way to minimize the heavy data stored at hot/warm DB but nothing went ok since the cold data won't accept and migartions from the hot/warm data&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="KhalidAlharthi_0-1721120975655.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/31780iD767AE96EDCA11D2/image-size/medium?v=v2&amp;amp;px=400" role="button" title="KhalidAlharthi_0-1721120975655.png" alt="KhalidAlharthi_0-1721120975655.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;any suggestions?&lt;/P&gt;</description>
      <pubDate>Tue, 16 Jul 2024 09:10:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693451#M115273</guid>
      <dc:creator>KhalidAlharthi</dc:creator>
      <dc:date>2024-07-16T09:10:33Z</dc:date>
    </item>
    <item>
      <title>Re: moving data from hot/warm to cold DB</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693523#M115282</link>
      <description>&lt;P&gt;Make sure all you path are correct.&amp;nbsp; &amp;nbsp;Has this worked before?&lt;/P&gt;&lt;P&gt;You should also set the hot volume&amp;nbsp; to not be able to take all the disk volume.&lt;/P&gt;&lt;P&gt;Eks if you have 2TB of Hot/Warm disk, use some like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;[volume:hot]
path = /data/splunk/index/hot/vol
maxVolumeDataSizeMB = 1900000&lt;/LI-CODE&gt;</description>
      <pubDate>Tue, 16 Jul 2024 19:16:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693523#M115282</guid>
      <dc:creator>jotne</dc:creator>
      <dc:date>2024-07-16T19:16:48Z</dc:date>
    </item>
    <item>
      <title>Re: moving data from hot/warm to cold DB</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693570#M115289</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213488"&gt;@jotne&lt;/a&gt;&amp;nbsp;thank you for your assistance,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;i'm afraid that's will cause issues with my data inside the indexers already.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;so is this affect the data stored or by any meaning the data it self?&lt;/P&gt;</description>
      <pubDate>Wed, 17 Jul 2024 05:55:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/moving-data-from-hot-warm-to-cold-DB/m-p/693570#M115289</guid>
      <dc:creator>KhalidAlharthi</dc:creator>
      <dc:date>2024-07-17T05:55:45Z</dc:date>
    </item>
  </channel>
</rss>

