This message originated from Cribl Community Slack.
Click here to view the original link.
can cribl search read splunk frozen buckets that I store in my own S3?
Solved
Can Cribl Search Read Splunk Frozen Buckets That I Store In My Own S3
Best answer by David Cavuto
Yes, Search can read and Search into Splunk Journal files stored in any location that you can access with Cribl Search, including AWS S3.
Yes, Search can read and Search into Splunk Journal files stored in any location that you can access with Cribl Search, including AWS S3.
@user Is this bucket in a SmartStore format I assume? In a Federated Dataset with an S3 Data provider to your bucket, you will see the Partitioning Scheme that allows you to select the proper formats.
Links for this message:
Screenshot 2026-04-30 at 4.09.05 PM.png
Links for this message:
Screenshot 2026-04-30 at 4.09.05 PM.png
Yeah
If it doesn't work, maybe we can Zoom on it tomorrow.
Sign up
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.