splunk-ddaa-archive

Community

Render and manage DDAA retention lifecycles.

Authorchambear2809
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Render, preflight, and validate Splunk Cloud Platform Dynamic Data Active Archive (DDAA) lifecycle assets: per-index archive retention via the ACS API (searchableDays plus splunkArchivalRetentionDays), enable/update payloads, archived/restored storage audits, and a guided UI restore handoff. Use when the user asks to archive expired Splunk Cloud data to the Splunk-managed archive, set or change DDAA archive retention, enable/update on index, restore archived data for searching, audit archive/restore storage consumption, or understand DDAA versus DDSS retention tiers.

Core Features & Use Cases

  • Render per-index DDAA retention payloads and assets (create/enable/update) via ACS API.
  • Provide status and audit tooling to inspect current retention, archived data, and restored buckets.
  • Guided UI restore handoff and a safe, render-first workflow to manage retention without direct data loss.

Quick Start

Render DDAA assets for a selected stack and index, then apply changes with enable-ddaa.sh and use status.sh, restore.sh, or audit.sh for validation and management.

Dependency Matrix

Required Modules

None required

Components

scripts

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: splunk-ddaa-archive
Download link: https://github.com/chambear2809/splunk-cisco-skills/archive/main.zip#splunk-ddaa-archive

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.