Restore frozen data

[Prakash493]

Hi currently i am restoring the data from frozen bucket to thawed bucket , i am copying the data from frozen to thaweddb then i am rebuilding the buckets to thaweddb but the location where my db buckets reside is /data/home/ (index name)/ -- here my frozendb and thaweddb buckets reside and its currently clustered.Do i need to thaw the data to this path ? because when i saw the splunk docs they mentioned to thaw the data to /home/var/lib/splunk/default/thaweddb , this location doesnot exist in my any indexers what should i do for it ? should i go with my first location and thaw it ?

[richgalloway · Accepted solution]

Thawed data must be put into the directory where Splunk expects to find it. That directory name is specified in indexes.conf for each index. If the specified directory does not exist, create it or change the configuration.

[Prakash493]

Thank you so much