Deployment Architecture

How should I go about Splunk DDAA storage?



In Splunk cloud environment we are using Splunk DDAA to archive the data for 1 year(DDAA retention period). But when i try to restore the data more than 1 year still its restoring.Can someone suggest why its restoring more than a year.

Also suggest how much storage is required for DDAA. If I'm ingesting 50 GB per day and DDAA retention period is 1 year.



Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...