Hi,
Is there an event that I can look at for buckets moving to frozen? We had some data that dropped off recently, and I want to keep an eye on this, but I can't find anything specific that identifies this situation.
index=_internal sourcetype=splunkd component=BucketMover "Will attempt to freeze"
