Hi there,
Below is sample index configuration:
[apache_web]
homePath =/splunk/hot/apache_web
coldPath = /splunk/cold/apache_web
thawedPath = /splunk/thawed/apache_web
frozenTimePeriodInSecs = 7776000
maxWarmDBCount = 300
But i was wondering where the data will be stored when it rolled over from cold to frozen when "coldToFrozenDir" is not specified ?
↧