splunk-ddaa-archive-setup

Community

Render per-index DDAA retention in Splunk Cloud.

Authorchambear2809
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Manages per-index DDAA archival retention in Splunk Cloud by rendering policies, validating inputs, and producing ready-to-use artifacts and runbooks.

Core Features & Use Cases

  • Render per-index DDAA policy payload with searchable days and archival retention via ACS.
  • Validate inputs, generate acs-payload.json, restore-runbook.md, disable-runbook.md, and status.sh for auditing and rollback.
  • Apply archival retention via ACS (with explicit acceptance) or provide UI/runbook guidance for Splunk Web.

Quick Start

Render a DDAA policy for a given index using its searchable and archival retention values.

Dependency Matrix

Required Modules

None required

Components

scripts

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: splunk-ddaa-archive-setup
Download link: https://github.com/chambear2809/splunk-cisco-skills/archive/main.zip#splunk-ddaa-archive-setup

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.