Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

data rolling from hot but not going to warm bucket

$
0
0
Hi All, Recently I have my splunk hot drive got corrupted so I symlink my hot directory to new working drive. I get all my new data written to new one but whenever a bucket gets rolled from hot , nothing is getting written to warm db(as if no new new buckets are getting created). But i can still see the data in splunk. Any idea what is happening here and with this procedure of symlink do I lost some old data.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>