Deployment Architecture

How to restore data from archive / frozen buckets to thawed?

louieb3
Path Finder

I need to restore a lot of buckets from archive/frozen to thawed. The way I am doing it, I copy the buckets from the frozendb directory to the thaweddb directory, then I run

rebuild /opt/splunk/var/lib/splunk/os/thaweddb/bucketname01

My question is if someone knows how to do the rebuild portion for multiple buckets instead of having to do it one bucket at a time.

Thanks.

Tags (3)
0 Karma

dperry
Communicator
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...