Knowledge Management

Copy archive data to use in SmartStore

mwdbhyat
Builder

Hi there,

I am trying to do a POC on a single instance of Splunk to take some data that was archived(so its just the journal file). I want to get this in to SmartStore to use as warm buckets - any thoughts on how I can achieve this? I thought about trying to thaw the data and rebuild the tsidx then copy it using splunk to s3.

Has anyone done anything like this?

Thanks!

0 Karma
Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...