Hi, have a requests to restore 40weeks logs from dynamic data archive storage data for one of the index on splunk cloud.may i know process and best practices if any
Hi
you are probably using wrong acronyms as DDAS is active searchable data. You could see those e.g. https://www.splunk.com/en_us/blog/platform/dynamic-data-data-retention-options-in-splunk-cloud.html?... see also https://lantern.splunk.com/Splunk_Platform/Product_Tips/Data_Management/Setting_data_retention_rules...
Could you check from where you want to restore and update this question based on it?
r. Ismo