Splunk bucket mover is taking over 4 minutes for a bucket to move from hot to cold. Now my hot storage volume is starting to fill
Are your hot and warm locations on different storage ?
Are you buckets large (they can be up to 10GB for auto_large size)?
If they are on remote devices (like a network storage), check your upload speed, or if you need smaller buckets, change your defaults.