Make a lot of frozen data searchable

[rubeniturrieta]

Hi to everyone. I have a lot of frozen data (like 20 gb), and a i need to make it searchable again. How can i do this?... obviously i cant use a single command for every file in every folder. Is there a command to take all folders with all files?

Here's a look of a segment of the frozen folders.

db_1408076602_1408076602_748 db_1420647017_1420634475_1048
db_1408076602_1408076602_752 db_1420654728_1413624270_1287
db_1408076602_1408076602_845 db_1420657048_1420647018_1049
db_1408076602_1408076602_848 db_1420672600_1420657049_1051
db_1408076602_1408076602_854 db_1420672603_1418915738_1215
db_1408076602_1408076602_857 db_1420715870_1420672601_1052
db_1408076602_1408076602_859 db_1420721184_1420431372_1060
db_1408076602_1408076602_861 db_1420724999_1420715871_1053
db_1408076602_1408076602_877 db_1420734973_1420725000_1054
db_1408076602_1408076602_880 db_1420735614_1413815858_1211
db_1408076602_1408076602_882 db_1420742176_1420734974_1055
db_1408076602_1408076602_885 db_1420756585_1420742177_1056
db_1408076602_1408076602_888 db_1420762828_1417439842_1313
db_1408076602_1408076602_891 db_1420799798_1420756586_1058
db_1408076602_1408076602_898 db_1420808771_1413483199_1070
db_1408076602_1408076602_902 db_1420810083_1420799799_1061
db_1408076602_1408076602_905 db_1420819515_1420810084_1062
db_1408076602_1408076602_991 db_1420829218_1416989929_1093
db_1408076602_1408076602_993 db_1420832068_1420819516_1063
db_1408076602_1408076602_996 db_1420846736_1420832069_1064
db_1408366638_1408064360_390 db_1421060806_1420833131_1065
db_1408379226_1408366639_391 db_1421069342_1421060807_1067
db_1408392053_1408379227_392 db_1421101532_1421088700_1072
db_1408407116_1408392054_393 db_1421115540_1421069343_1068
db_1408480733_1408407117_394 db_1421153465_1421135444_1074
db_1408507730_1408449529_395 db_1421157696_1421067126_1073
db_1408554574_1408507731_396 db_1421163688_1421153466_1075
db_1408572739_1408554575_397 db_1421173355_1421163689_1076
db_1408629162_1408572740_398 db_1421185976_1421173356_1078
db_1408656980_1406247285_204 db_1421222882_1421185977_1079
db_1408846357_1408710321_202 db_1421239586_1421222883_1080
db_1408902344_1404150142_293 db_1421249370_1421239587_1082
db_1408904810_1404206890_304 db_1421259333_1421249371_1083
db_1408907146_1404236372_305 db_1421271998_1421259334_1084
db_1408909610_1404304605_306 db_1421319964_1421271999_1085
db_1408912006_1404328799_307 db_1421329748_1421319965_1086
db_1408914530_1404401093_308 db_1421335504_1421329749_1087
db_1408916390_1404424677_309 db_1421345976_1420833131_1088
db_1408919030_1404493612_310 db_1421355222_1421345977_1091
db_1408921725_1404590208_311 db_1421397960_1421397960_1100
db_1408923890_1404750074_312 db_1421403867_1421355223_1092

Thanks you so much in advance

Regards

[lguinn2 · Accepted solution]

Move all the buckets into the thawed directory of the index.
Write a script that does something like this:

  cd thawed
  stop splunk
    for f in `ls`
    do
       splunk rebuild $f
    done
    start splunk

Of course your script will need to use the real directory paths for the splunk commands and for the cd command.