Getting Data In

NFS share for frozen data

rashid47010
Communicator

we have soft link for Fronzen data which link to NFS share.
Now storage team just want to change to other IP/hostname with same directory sturcture.
how can we achieve this without loosing archieve data.

Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Once buckets are frozen Splunk forgets about them. They can be moved or handled in any way you wish and Splunk won't care. All that matters is you have some way to transfer frozen files to the thawed directory when you need to search them.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Once buckets are frozen Splunk forgets about them. They can be moved or handled in any way you wish and Splunk won't care. All that matters is you have some way to transfer frozen files to the thawed directory when you need to search them.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...

Platform Highlights | November 2022 Newsletter

 November 2022 Skill Up on Splunk with our New Builder Tech Talk SeriesCan you build it? Yes you can! *play ...

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...