I'm doing a proof of concept of SmartStore with multiple object stores. There appears to be a defect where theremote.s3.access_key (and maybe remote.s3.secret_key) is not being properly associated w...
We would like to remove EBS volumes which were used for cold store and DM summary Docs is not overly clear on the recommended approach https://docs.splunk.com/Documentation/Splunk/7.3.4/I...
...uckets get older than hotlist_recency_secs? or both? 3. In case max_cache_size=1TB, Iet's say I do "All time" search, which leads to fetching warm buckets from remote storage. Due to the f...
We have a few different requirements. i)Upload multiple (buckets)TB of legacy Standalone buckets to the index that is already migrated to theremotestore. ii)Upload a few legacy Standalone b...
I need to figure out the valid command that could be used to delete bucket locally and from a remotestore. In the past, we used the command
curl -k -u admin: -X POST https://localhost:8089/s...
Hi All,
I am planning to implement SmartStore in my current splunk environment and wanted to know if i am only doing it for few indexes in my cluster do i still have to change and make the SF=RF i...
Hi there,
Im looking at sizing an environment forSmartStore - does anyone have a formula or speadsheet that will factor in my storage needs forthe entire clusters local storage, including smartstore...
...ucket rolls to warm and the S3 client is required to upload the bucket to theremotestore does it make a PUT/POST request to theremotestorefor each file in the bucket or are multiple files batched i...
