Need to dseign a search to retrieve data on cold db

[imamsumtotal]

Hi

We have deployed a flash blade to use it for cold db storage. As testing purpose we have configured cold buckets for a single index. We can see data moving from indexers(hot) to the flash blade (cold).  Confirmed the same using dbinspect. Need to check if i can be able to search data under cold db without any issues. Can someone please help with sample searches that can access the cold storage data so that i could analyse the search results. Data from hot buckets will move to cold once 200 gb exceeded. Thanks in advance.

Environment:Splunk Enterprise

Indexer cluster with 3 peers

[isoutamo · Accepted solution]

Just use “all time” for time with this index. 

r. Ismo

[imamsumtotal]

Thanks.