Final answer:
DDAA and DDSS are storage options in Splunk Cloud with several differing characteristics.
Step-by-step explanation:
DDAA and DDSS are both storage options in Splunk Cloud, but they have some key differences.
- Purchased via Accounts in 500 GB blocks: This characteristic applies to both DDAA and DDSS.
- Blended with standard searchable retention, restored data is searchable in cloud for 30 days: This characteristic applies to both DDAA and DDSS.
- Purchased and managed by customer only: This characteristic applies to DDAA only.
- Data must be thawed in a customer-managed environment: This characteristic applies to DDSS only.
- Commonly purchased option for medium to long-term retention: This characteristic applies to DDAA only.
- Archive and thaw process is Splunk-managed: This characteristic applies to DDSS only.
- Storage option for long-term for auditing and tracking of historical data/compliance: This characteristic applies to DDAA only.
- Retrieval is limited to 10: This characteristic applies to DDSS only.
- Data cannot be restored or searched in Splunk Cloud unless re-ingested: This characteristic applies to DDSS only.