Getting Data In

How to configure index settings to index data directly in S3 buckets/smartstore ?

damode
Motivator

Is there a way to skip hot buckets (local storage) and ingest/index data directly into smartstore (s3 buckets) ?

Labels (2)
Tags (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

No this would not be possible. The bucket while hot is changing and it can only be uploaded to object storage when the changes stop. i.e. A warm bucket

damode
Motivator

What if we just reduce the maxhotbuckets attribute to - 0 or change other hotbucket attribute like maxHotSpanSecs to 0, wouldn't just skip hot bucket and roll to warm bucket which would essentially get stored on S3 ?

Alternatively,  what if we configure S3 storage for hot buckets ?

0 Karma

gjanders
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...

Explore the Latest Educational Offerings from Splunk [January 2025 Updates]

At Splunk Education, we are committed to providing a robust learning experience for all users, regardless of ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...