The Question about Splunk SmartStore

[yfzhang]

I am using the smartstore function of splunk. The S3 protocol is used to tier data to ceph storage. Can Splunk SmartStore delete buckets from object storage using the S3 protocol?

[richgalloway]

Yes, SmartStore will delete S3 buckets when they expire.  If you have defined coldToFrozenScript or coldToFrozenDir then the buckets will be moved to the frozen dir or wherever the script decides to put them.