Deployment Architecture

How to restore data from archive / frozen buckets to thawed?

louieb3
Path Finder

I need to restore a lot of buckets from archive/frozen to thawed. The way I am doing it, I copy the buckets from the frozendb directory to the thaweddb directory, then I run

rebuild /opt/splunk/var/lib/splunk/os/thaweddb/bucketname01

My question is if someone knows how to do the rebuild portion for multiple buckets instead of having to do it one bucket at a time.

Thanks.

Tags (3)
0 Karma

dperry
Communicator
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...