Hi,
Forgive me if this is a dumb question... can I move an index(s) into a volume reference?
Index paths will remain the same as we want to limit total size via "maxVolumeDataSizeMB".
Will the index name(s) be created in "coldToFrozenDir"?
I have an index(s) in indexes.conf (SPLUNK_DB=/media/data/splunk):
[sonicwall]
coldPath = $SPLUNK_DB/sonicwall/colddb
homePath = $SPLUNK_DB/sonicwall/db
thawedPath = $SPLUNK_DB/sonicwall/thawedd
[index n]
...
I wish for new indexes.conf to be:
coldToFrozenDir = /media/archive
[volume:san]
path = /media/data/splunk
maxVolumeDataSizeMB = 2000000
[sonicwall]
coldPath = volume:san/sonicwall/colddb
homePath = volume:san/sonicwall/db
thawedPath = $SPLUNK_DB/sonicwall/thaweddb
[index n]
...
Thank you.
Yes you can "migrate" like this. Usually good to backup your data before playing though 😉
The index names will only show up in coldToFrozenDir when a bucket roles to frozen (I believe, but could be wrong).
You should be fine.