Hi
We have deployed a flash blade to use it for cold db storage. As testing purpose we have configured cold buckets for a single index. We can see data moving from indexers(hot) to the flash blade (cold). Confirmed the same using dbinspect. Need to check if i can be able to search data under cold db without any issues. Can someone please help with sample searches that can access the cold storage data so that i could analyse the search results. Data from hot buckets will move to cold once 200 gb exceeded. Thanks in advance.
Environment:Splunk Enterprise
Indexer cluster with 3 peers
Just use “all time” for time with this index.
r. Ismo
Thanks.