Getting Data In

Setting WORM in SmartStore

bobbyoommen
Engager

Hello,

Got a request from a customer who would like to archive and set WORM on the data. They did ask about Splunk SmartStore and compliance buckets. It is my understanding that SmartStore does not support WORM solution. Is that the case, since objects needs newer version?

Could we – Use SmartStore to tier off to S3, and “freeze” the cold bucket and archive to a newer bucket where I can set WORM on S3 buckets. Is this possible?

Regards,
Bobby.

dm1
Contributor

Hi, did you get any answer to this ?

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...