Getting Data In

Can I Thaw a Bucket That Was Frozen When I Don't Have a Frozen Directory Configured?

andrewkenth
Communicator

Title says it all. Is my data lost for good?

Tags (2)
0 Karma
1 Solution

aelliott
Motivator

Once a bucket has been frozen with no script setup to archive, it will be lost.

Here is more information on this:
http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy

View solution in original post

aelliott
Motivator

Once a bucket has been frozen with no script setup to archive, it will be lost.

Here is more information on this:
http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy

Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...