I have a requirement to move indexed data from index-A to another index-B in a smart-store enabled cluster. Both indexes (A & B ) has data in the AWS s3-bucket. I would like to know if the below steps works?
Steps :
One cannot move data from one index to another. Once the data is in an index it stays there until it ages out or is removed to make room for newer data.
NEVER mess with Splunk's S3 buckets. Do so at your own risk and be prepared for a Bad Day.