I would like to archive the data older than 1 year. I have a single storage device to store archived data. Can we use use single storage to archive the index data coming from all indexers? or do we need separate storage for each indexer to archive data?
Hi ankithreddy777,
Yes, you can use single storage to back up indexed data from all indexers. However, backing up data on all indexers in a cluster means you create duplicate copies of data.
For detailed backup info, please refer to the doc here:
http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Backupindexeddata#Clustered_data_backups
Hope this helps. Thanks!
Hunter