Knowledge Management

Cold to frozen windows environment buckets

afolabia
Path Finder

Do I need to specify or create each index folder/bucket when doing coldToFrozen at the new location or is it automatically created?

Tags (1)
0 Karma

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder

0 Karma

p_gurav
Champion

You can create global settings as

[default]
coldToFrozenDir =

Splunk will automatically create the subfolders according to the index.

OR

Try running coldtofrozen script and change the directory path. Refer to this link:
https://answers.splunk.com/answers/38825/coldtofrozendir-per-index.html

afolabia
Path Finder

Actually, I had to include it for each index to have them in their separate folders. Specifying it in the default puts everything in one folder.

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...