About Youn

Youn · ‎06-19-2025

Hi @livehybrid Thank you for your reply. We don't have an indexer cluster. I understand that if I create a cluster and have a replica bucket, it will be possible to protect buckets. Thank you for introducing the reference site. I will check it out. I am planning to restore a configuration file from EBS.Will Splunk still function if some of the logs in the EBS hot bucket and some of the logs in the S3 warm bucket are duplicated?

Youn · ‎06-19-2025

If anyone knows, could you please let me know the following? Our Splunk Enterprise system is based on AWS EC2.We use AWS S3 for Splunk SmartStore.We take backup of EBS and S3(smartstore) everyday.But the cost of S3 backup is very high.So we are planning to stop backup of S3.Because we have Smart S3 versioning turned on. If we had to restore the EC2 , could we restore from S3 versioning? Since the timing of EBS backup and S3 versioning are different, I think there may be a problem if I restore EBS and restore S3 from a previous version at a different slice. Since I want to prioritize cost reduction, it is not a problem if some data on the EBS side is missing as long as it can be read without any problems. Please let me know if you have any ideas on how to reduce backup costs in a similar environment.

Posts	2
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎06-19-2025

Online Status	Offline
Date Last Visited	‎06-19-2025 02:22 AM

Restore smartstore from S3 versioning

Re: Restore smartstore from S3 versioning

Restore smartstore from S3 versioning

Are you a member of the Splunk Community?

Restore smartstore from S3 versioning

Re: Restore smartstore from S3 versioning

Restore smartstore from S3 versioning