Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Forcing data to freeze

$
0
0
We, up to now, have never frozen data. However, we have a requirement now to freeze some data for years. I need to show in a development environment how this works. I have created a new index. Defined coldToFrozenDir and set frozenTimePeriodInSecs to 600 (10 mins). I have created input for a text file and filled it with about 100k lines of data. The data is being successfully indexed The directory was created, but there is no frozen data. I suspect it's because the data is still hot. Is there a way to force data through the bucket cycle so I can see it show up frozen?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>