Is it possible to archive the Splunk logs in single site in distributed multisite environment?


Hello Everyone,

We have query regarding the cold storage and archive is it possible to archive the splunk logs in single site in distributed multisite environment, If yes can you share the any documents to configure the same.

At one of customer,  do not want the cold storage is It possible to configure the cold storage only at DC and at DR we can skip and we just need configure in hot storage path in indexes.conf. Let us know if it’s possible to configure above mentioned scenario

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...