Getting Data In

Followed DDSS self storage instructions from Docs, but doesn't move data to s3?

jst
Observer

Hi ,

I followed the instruction to setup self-storage   https://docs.splunk.com/Documentation/SplunkCloud/7.2.7/Admin/DataSelfStorage?ref=hk

I've confirmed Splunk created the test file in my s3 bucket.

But it does not move my index data to the s3 bucket. I don't see any files expect the test one

Expect to configure my index with "Self-storage" and select "storage location",  do I need to do something to trigger? 

Any suggestion is appreciated. Thanks.

 

My index setting:

Earliest Event ==> "10 months ago", latest Event ==> "a month ago" , status ==> "Enable"

Searchable time (days) => 7

Dynamic Data Storage => Self Storage,  Self storage location ==> <my s3 bucket>

 
Tags (2)
0 Karma

eddy_liang
Path Finder

I have a similar problem except only some of my Indexes don't show up in the S3

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...