export splunk index data y using Hadoop-connect app

[kml_uvce]

Hi

Can I export splunk indexed data(not search data) from splunk to HAdoop by using Hadoop-connect app ?
My requirement is to move warm or cold or thawaed buckets to Hadoop.

[s2_splunk]

If you are a Hunk 6.3 customer, archiving data from Splunk into HDFS and transparently searching it is supported natively: Configure Archiving

Prior to 6.3, the hadoop connect app does allow you to do similar things, although it does NOT allow you to use the Splunk UI to search across data in HDFS. But you can export /import.

Thawed data is a different topic though, not sure what your use case is for that.