We have clustered indexing as part of our Splunk architecture deployed on Oracle Cloud and trying to come up with a reliable backup and restore strategy. OCI has buckets for object storage.
Would it make sense to have backups from warm, cold, and archived/frozen indexed data on the Splunk servers taken daily and then sent over to an OCI bucket? Splunk deployments on OCI aren't common, so I'm interested in hearing what people have done when it comes to Splunk deployments in AWS. I believe that S3 buckets have been used for backup storage and then the data is restored from there straight to the Splunk servers.