The Question about Splunk SmartStore

yfzhang · ‎09-15-2021

I am using the smartstore function of splunk. The S3 protocol is used to tier data to ceph storage. Can Splunk SmartStore delete buckets from object storage using the S3 protocol?

richgalloway · ‎09-15-2021

Yes, SmartStore will delete S3 buckets when they expire. If you have defined coldToFrozenScript or coldToFrozenDir then the buckets will be moved to the frozen dir or wherever the script decides to put them.

---
If this reply helps you, Karma would be appreciated.

The Question about Splunk SmartStore

configuration

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub

Join the Conversation

The Question about Splunk SmartStore

configuration

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Keep the Learning Going with the New Best of .conf Hub