Getting Data In

How to configure index settings to index data directly in S3 buckets/smartstore ?

damode
Motivator

Is there a way to skip hot buckets (local storage) and ingest/index data directly into smartstore (s3 buckets) ?

Labels (2)
Tags (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

No this would not be possible. The bucket while hot is changing and it can only be uploaded to object storage when the changes stop. i.e. A warm bucket

damode
Motivator

What if we just reduce the maxhotbuckets attribute to - 0 or change other hotbucket attribute like maxHotSpanSecs to 0, wouldn't just skip hot bucket and roll to warm bucket which would essentially get stored on S3 ?

Alternatively,  what if we configure S3 storage for hot buckets ?

0 Karma

gjanders
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...