Does anyone know how to migrate Splunk Cloud Archive frozen data to Azure blob (or even AWS)? All the information I found was on putting hot data into Azure/AWS.
Do you mean DDSS from Splunk Cloud?
From what I could tell DDSS lets you store "new" archive data to a self storage (Azure/S3) I want to move all our archive data (500+ TB).
Can DDSS move already frozen data?
In Splunk Cloud there is DDAA (archive), is that the data you want to export?
I'd be happy to walk you through some options, but first I want to make sure we are talking about the same thing.
Yep, the data is currently in DDAA
DDSS - Yes, Cribl can access and search this data
DDAA - .. tricky .. most likely Cribl will not have access to this storage