we have soft link for Fronzen data which link to NFS share.
Now storage team just want to change to other IP/hostname with same directory sturcture.
how can we achieve this without loosing archieve data.
Once buckets are frozen Splunk forgets about them. They can be moved or handled in any way you wish and Splunk won't care. All that matters is you have some way to transfer frozen files to the thawed directory when you need to search them.
Once buckets are frozen Splunk forgets about them. They can be moved or handled in any way you wish and Splunk won't care. All that matters is you have some way to transfer frozen files to the thawed directory when you need to search them.