I am following this documentation: http://wiki.splunk.com/Community:BestPracticesForBackingUp to try to force a hot-to-warm db rolling. The splunk version is 6.2.2, free version.
./splunk search '| oldsearch !++cmd++::roll' -auth splunk
Unknown search command 'oldsearch'
Any ideas what I am missing?
Thanks!
Xueshan
... View more