splunk-ddaa-archive-setup
CommunityRender per-index DDAA retention in Splunk Cloud.
Authorchambear2809
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Manages per-index DDAA archival retention in Splunk Cloud by rendering policies, validating inputs, and producing ready-to-use artifacts and runbooks.
Core Features & Use Cases
- Render per-index DDAA policy payload with searchable days and archival retention via ACS.
- Validate inputs, generate acs-payload.json, restore-runbook.md, disable-runbook.md, and status.sh for auditing and rollback.
- Apply archival retention via ACS (with explicit acceptance) or provide UI/runbook guidance for Splunk Web.
Quick Start
Render a DDAA policy for a given index using its searchable and archival retention values.
Dependency Matrix
Required Modules
None requiredComponents
scripts
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: splunk-ddaa-archive-setup Download link: https://github.com/chambear2809/splunk-cisco-skills/archive/main.zip#splunk-ddaa-archive-setup Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 510,000+ vetted skills library on demand.