If it possible to change an index and retain disksize online? So after changing fi the coldtofrozeninsec for a index on a full disk?
Do you mean without restarting Splunk? If so, no, you must make the changes to configuration and then restart for them to take effect.
