Knowledge Management

Cold to frozen windows environment buckets

afolabia
Path Finder

Do I need to specify or create each index folder/bucket when doing coldToFrozen at the new location or is it automatically created?

Tags (1)
0 Karma

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder

0 Karma

p_gurav
Champion

You can create global settings as

[default]
coldToFrozenDir =

Splunk will automatically create the subfolders according to the index.

OR

Try running coldtofrozen script and change the directory path. Refer to this link:
https://answers.splunk.com/answers/38825/coldtofrozendir-per-index.html

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...