We successfully completed splunk upgrade from version 8.1.4 to 9.0.6 on indexers,search heads,and ds but we are facing issue while upgrading on HF.Could any one help with the whole  splunk upgrade steps on HF ? Also please suggest solution to fix the error we are facing after untar the installation file and starti g service with accept license.   couldn't run "splunk" migrate: No such file or directory ERROR while running rename-cluster-app migration ... View more

Hello All,   I have updated the indexes.conf file homePath.maxDataSizeMB  from 13gb to 30gb & maxTotalDataSizeMB 13gb to 30gb.And after that from search result i am not able to see old days data.Can anyone provide information how to check and fix this by getting old data in splunk? indexes.conf file values now: #aws_riskinfo [aws_riskinfo] homePath = volume:hotwarm/aws_riskinfo/db coldPath = volume:hotwarm/aws_riskinfo/colddb thawedPath = /prod/appli_is/splunk_indexes/archives/ARCH1Y/aws_riskinfo/thaweddb homePath.maxDataSizeMB = 30000 coldPath.maxDataSizeMB = 0 maxTotalDataSizeMB = 30000 maxWarmDBCount = 4294967295 frozenTimePeriodInSecs = 7776000 #maxDataSize = auto_high_volume coldToFrozenDir = /prod/appli_is/splunk_indexes/archives/ARCH1Y/aws_riskinfo/frozen ... View more

In a nutshell AZ T rade received a request to delete some personal data from a former contractor. we have to delete data linked to ****(employee name) older than a year.  In which it is necessary to delete data and logs dating back more than a year concerning ****(Employee name). How can we do that to delte old personal data and logs dating back more than a year of an ex-employee?   ... View more