https://community.splunk.com/t5/Getting-Data-In/Maximum-ID-for-bucket/m-p/168276#M34058 <P>I intend on consolidating frozen buckets from multiple indexers onto a long term archival machine. The goal would be to make this archival machine an "read-only" indexer, and have it serve all of the frozen buckets seamlessly to splunk users via distributed search.</P> <P>Since we'd have $SPLUNK_HOME/var/lib/splunk/(indexhere)/frozen/ contain buckets from 5+ indexers, i was going to try to add a prefix/postfix to each bucketid added to the directory to ensure there aren't any collisions. </P> <P>Does anyone know how large the bucketid's can be? How often the id's return to 0?</P> Wed, 15 Oct 2014 15:34:56 GMT w531t4 2014-10-15T15:34:56Z https://community.splunk.com/t5/Getting-Data-In/Maximum-ID-for-bucket/m-p/168276#M34058 <P>I intend on consolidating frozen buckets from multiple indexers onto a long term archival machine. The goal would be to make this archival machine an "read-only" indexer, and have it serve all of the frozen buckets seamlessly to splunk users via distributed search.</P> <P>Since we'd have $SPLUNK_HOME/var/lib/splunk/(indexhere)/frozen/ contain buckets from 5+ indexers, i was going to try to add a prefix/postfix to each bucketid added to the directory to ensure there aren't any collisions. </P> <P>Does anyone know how large the bucketid's can be? How often the id's return to 0?</P> Wed, 15 Oct 2014 15:34:56 GMT https://community.splunk.com/t5/Getting-Data-In/Maximum-ID-for-bucket/m-p/168276#M34058 w531t4 2014-10-15T15:34:56Z https://community.splunk.com/t5/Getting-Data-In/Maximum-ID-for-bucket/m-p/168277#M34059 <P>Bucket id are an integer, so the system limit is probably 2^31.</P> Wed, 15 Oct 2014 16:45:06 GMT https://community.splunk.com/t5/Getting-Data-In/Maximum-ID-for-bucket/m-p/168277#M34059 yannK 2014-10-15T16:45:06Z