A Splunk administrator has been tasked with developing a retention strategy to have frequently accessed data sets on SSD storage and to have older, less frequently accessed data on slower NAS storage. They have set a mount point for the NAS. Which parameter do they need to modify to set the path for the older, less frequently accessed data in indexes.conf?
In Splunk, the 'coldPath' parameter in indexes.conf specifies the location for cold data. Cold data is data that is older and less frequently accessed, which aligns with the requirement to move it to slower NAS storage. Therefore, the administrator should modify the 'coldPath' parameter to set the path for the older, less frequently accessed data.
Answer is B