Hi,
I've archivedindexeddata into location "D:\Program Files\Splunk\myfrozenarchive" and now myfrozenarchive folder has to folders
db_1364755264_1356979773_16
d...
Hello All, I have 3 indexer in cluster and data is being stored in the NAS server. and for one server data is stored in cold logs on a mounted storage. I have copied the data from NAS to 2 s...
....2 and higher, you can thaw data on any indexer instance, not just the one that it originated on.
"For the most part, you can restore an
archive to any instance of the
indexer, not just the o...
...t make sense to have backups from warm, cold, and archived/frozen indexeddata on the Splunk servers taken daily and then sent over to an OCI bucket? Splunk deployments on OCI aren't common, so I'm i...
...ompletely lost but we have backups in Region B of the data from Region A; is it possible to restore the data into the indexer cluster in Region B or would we have to restore the data and put into thawed a...
I was recently asked to restore a couple months of data.
After reading>>> https://docs.splunk.com/Documentation/Splunk/7.2.7/Indexer/Restorearchiveddata
I don't see a way to restore J...
...torage drive, mounted on our Indexers (volume:drive/index/colddb).
Recently, due to a strange issue, the data inside the colddb went missing for 2 Indexes. We can't find it on the NAS drive as well. F...
We had an app installed on our Splunk console that created its own index. We've removed the application but wanted to save the data. The indexeddata is still around in a 'colddb' but we cannot f...
Hi,
I could not able to Restorearchiveddata and could not able to make it searchable even after following
Restorearchiveddata instractions in Splunk Admin Manual. Can any one please h...
...oldToFrozenscript.py
This will archive data to a particular directory that we mention in indexes.conf.
However it faces problems in cases of clustered architecture due to same multiple buckets being c...