We are planning to move to Smartstore for the cold storage and we are having the on-prem multisite indexer cluster. We are having two S3 object storage created with our partners. Can I point out t...
Hello. I am running 8.2.2 on Linux. We have four clustered indexers and are using SmartStore. I would like to empty an index (and recover the disk space). I have thus c...
Hi fellow Splunkers, As parameter maxTotalDataSizeMB is only available for non-Smartstoreindexes, what parameter in Smartstoreindex that replace this parameter? I want to start evicting bucket w...
...onsidering migrating some of the indexes in my clustered indexers to SmartStore. However, most of my indexes have their home path on an SSD partition, with the cold path on a HDD partition.&n...
I am struggling to understand data retention for Smartstoreindex. I guess I am thinking more from a non-smartstore way of data retention. Below is my requirement Data ingestion per day - 1...
I created a fresh index cluster in AWS using the Splunk AMI, upgraded to 7.2.5.1.
In the "Configure SmartStore" doc, Splunk says, "The following indexes.conf settings must remain unset: b...
Are Smartstore buckets uploaded to S3 immutable? We've been using Smartstore for almost a year and I have never seen an update to a bucket after its original upload to S3. Can anyone c...
We have a few different requirements. i)Upload multiple (buckets)TB of legacy Standalone buckets to the index that is already migrated to the remote store. ii)Upload a few legacy Standalone b...