Knowledge Management

Cold to frozen windows environment buckets

afolabia
Path Finder

Do I need to specify or create each index folder/bucket when doing coldToFrozen at the new location or is it automatically created?

Tags (1)
0 Karma

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder

0 Karma

p_gurav
Champion

You can create global settings as

[default]
coldToFrozenDir =

Splunk will automatically create the subfolders according to the index.

OR

Try running coldtofrozen script and change the directory path. Refer to this link:
https://answers.splunk.com/answers/38825/coldtofrozendir-per-index.html

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder.

0 Karma
Get Updates on the Splunk Community!

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...