https://community.splunk.com/t5/Getting-Data-In/How-to-test-a-coldToFrozenScript/m-p/333940#M61754 <P>You can create a test index with small value for these attributes<BR /> 1. maxWarmDBCount (default 300, set to 1)<BR /> 2. maxHotSpanSecs (default 777600 or 90 days, set to 3600 or 1hr)<BR /> 3. maxDataSize (set to 1 i.e. 1 MB)<BR /> 4. maxTotalDataSizeMB (set to 1 i.e. 1 MB)<BR /> 5. frozenTimePeriodInSecs (default 188697600 , set to 3600)</P> <P>Now setup some data to go to that index (or setup a scheduled search which uses collect command to send some test data to it). With above configurations, the data will roll to frozen frequently to test your script.</P> Thu, 12 Apr 2018 15:50:43 GMT somesoni2 2018-04-12T15:50:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-test-a-coldToFrozenScript/m-p/333939#M61753 <P>I'm writing a script to archive frozen data to S3, and the <A href="http://docs.splunk.com/Documentation/Splunk/7.0.3/Indexer/Automatearchiving">archiving documentation</A> seems pretty straightforward. Here's what I'm not so clear about: what's the best way to test my script once I've written it? How can I manually trigger a bucket to roll from cold to frozen?</P> Thu, 12 Apr 2018 15:29:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-test-a-coldToFrozenScript/m-p/333939#M61753 scharlipknewton 2018-04-12T15:29:36Z https://community.splunk.com/t5/Getting-Data-In/How-to-test-a-coldToFrozenScript/m-p/333940#M61754 <P>You can create a test index with small value for these attributes<BR /> 1. maxWarmDBCount (default 300, set to 1)<BR /> 2. maxHotSpanSecs (default 777600 or 90 days, set to 3600 or 1hr)<BR /> 3. maxDataSize (set to 1 i.e. 1 MB)<BR /> 4. maxTotalDataSizeMB (set to 1 i.e. 1 MB)<BR /> 5. frozenTimePeriodInSecs (default 188697600 , set to 3600)</P> <P>Now setup some data to go to that index (or setup a scheduled search which uses collect command to send some test data to it). With above configurations, the data will roll to frozen frequently to test your script.</P> Thu, 12 Apr 2018 15:50:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-test-a-coldToFrozenScript/m-p/333940#M61754 somesoni2 2018-04-12T15:50:43Z