There had been discussion on Archival to S3 on this, however the discussion is more with Hunk. And require solution without Hunk.
In the path to coldToFrozenScript.
"coldToFrozenDir = path/to/frozen/archive,"
- I hope we cannot specify AWS S3 Bucket path directly.
Hence there is Python Script is provided in the document
https://docs.splunk.com/Documentation/Splunk/7.0.0/Indexer/Automatearchiving
coldToFrozenScript = "$SPLUNK_HOME/bin/python" "$SPLUNK_HOME/bin/myColdToFrozen.py"
The question is anyone succeeded in Archiving to S3 or Glacier by editing this path?
If yes, how do we see the Archival Size/Trend to AWS S3 Bucket (with 'Index archive bucket')
Thanks in advance.
... View more