Verify Splunk Cloud Platform successfully moved your data

To verify that your data was successfully moved to your self storage location, you can search the splunkd.log files.

Note: You must have an sc_admin role to search the splunkd.log files.

Follow the appropriate procedure for your deployment's Splunk Cloud Platform Experience. For how to determine if your deployment uses the Classic Experience or Victoria Experience, see Determine your Splunk Cloud Platform Experience.

Classic Experience procedure

  1. Search your splunkd.log files to view the self storage logs. You search these files in Splunk Web by running the following search: 
    index="_internal" component=SelfStorageArchiver
  2. Search to see which buckets were successfully moved to the self storage location: 
    index="_internal" component=SelfStorageArchiver "Successfully transferred"
  3. Verify that all the buckets you expected to move were successfully transferred.

Victoria Experience procedure

  1. Search your splunkd.log files to view the self storage logs. You search these files in Splunk Web by running the following search: 
    index="_internal" "transferSelfStorage Successfully transferred raw data to self storage"
    The results of this search also show you which buckets were successfully moved to the self-storage location.
  2. Verify that all the buckets you expected to move were successfully transferred.