Knowledge Management

Cold to frozen windows environment buckets

afolabia
Path Finder

Do I need to specify or create each index folder/bucket when doing coldToFrozen at the new location or is it automatically created?

Tags (1)
0 Karma

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder

0 Karma

p_gurav
Champion

You can create global settings as

[default]
coldToFrozenDir =

Splunk will automatically create the subfolders according to the index.

OR

Try running coldtofrozen script and change the directory path. Refer to this link:
https://answers.splunk.com/answers/38825/coldtofrozendir-per-index.html

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder.

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...