Getting Data In

How to move fishbucket data to a warm bucket?

Madhan45
Path Finder

I wish to move all data which are in the fishbucket to warm bucket. Is there any command to do this?

0 Karma

3stimpson
Engager

I agree with @HiroshiSatoh, there is not enough information to provide you with good direction. Hot buckets automatically move to warm based on several factors, such as size of the buckets, quantity of buckets(limit reached), idle time etc. These values can be tweaked/adjusted in indexes.conf, but you should be careful you understand what/why you are changing.

0 Karma

HiroshiSatoh
Champion

"fishbucket Data" is already in "Warm (OR HOT) bucket".
What you want to do? Do you want to the restoration of data?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...