Deployment Architecture

Splunk Cloud: Dynamic self storage thawing replicated data

mohlatif
Explorer

When Splunk Cloud archives data to self managed AWS buckets, does that include replicated data?
If the buckets were to be thawed to an on premise Splunk instance would I need to look into de-duplicating the data?

0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

Only one copy is rolled off. You dont have to worry about deduplication.

View solution in original post

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Only one copy is rolled off. You dont have to worry about deduplication.

0 Karma

mohlatif
Explorer

Thanks, is this documented somewhere? I know for Splunk Enterprise, this is an issue with clustered environments. And thawing replicated data can lead to duplicates.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...