Having trouble finding an answer for this one but is it possible to change just the cold database location to a NAS for a Windows deployment? The System Requirements page states that we shouldn't use mapped drives "Do not index data to a mapped network drive on Windows (for example "Y:\" mapped to an external share.) Splunk Enterprise disables any index it encounters with a non-physical drive letter." If that's the case should Volume stanza the indexes.conf use the UNC path like the following? [volume:NAS]
path = \\NAS01\
[main]
homePath = $SPLUNK_DB\defaultdb\db
coldPath = volume:NAS\Database\coldDb Any help would be much appreciated
... View more