Getting Data In

Restore frozen data

Prakash493
Communicator

Hi currently i am restoring the data from frozen bucket to thawed bucket , i am copying the data from frozen to thaweddb then i am rebuilding the buckets to thaweddb but the location where my db buckets reside is /data/home/ (index name)/ -- here my frozendb and thaweddb buckets reside and its currently clustered.Do i need to thaw the data to this path ? because when i saw the splunk docs they mentioned to thaw the data to /home/var/lib/splunk/default/thaweddb , this location doesnot exist in my any indexers what should i do for it ? should i go with my first location and thaw it ?

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Thawed data must be put into the directory where Splunk expects to find it. That directory name is specified in indexes.conf for each index. If the specified directory does not exist, create it or change the configuration.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Thawed data must be put into the directory where Splunk expects to find it. That directory name is specified in indexes.conf for each index. If the specified directory does not exist, create it or change the configuration.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Prakash493
Communicator

Thank you so much

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...