PROBLEM: Within Splunk architectures that utilize frozen storage of data ingested into Splunk, the data then accumulates until space runs out and mechanisms outside of Splunk itself will need to be used to remain vigilant of the data age and volume. SOLUTION: Subzero aims to provide a user interface to quickly identify the age of frozen data so that the administrator can take appropriate actions such as thaw out or delete specific data.