https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287350#M10891 <P>Right, but we are looking for a backup solution not an archiving one...</P> Mon, 06 Jun 2016 19:34:37 GMT ddrillic 2016-06-06T19:34:37Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287346#M10887 <P>As a backup solution for Splunk’s data, we wonder what might be a solution to back up the Splunk data into HDFS and make it available for search via Hunk.</P> <P>Any thoughts?</P> Mon, 06 Jun 2016 17:08:11 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287346#M10887 ddrillic 2016-06-06T17:08:11Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287347#M10888 <P>Please take a look at this blog:<BR /> <A href="http://blogs.splunk.com/2015/01/21/new-in-hunk-6-2-1-splunk-archiving-searchable-archives/">http://blogs.splunk.com/2015/01/21/new-in-hunk-6-2-1-splunk-archiving-searchable-archives/</A></P> Mon, 06 Jun 2016 17:13:17 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287347#M10888 splunkIT 2016-06-06T17:13:17Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287348#M10889 <P>In addition to the above Hunk archiving recommendation, I would add the Hadoop Connect App exporting as another option: <A href="https://docs.splunk.com/Documentation/HadoopConnect/1.2.3/DeployHadoopConnect/ExporttoHDFS">https://docs.splunk.com/Documentation/HadoopConnect/1.2.3/DeployHadoopConnect/ExporttoHDFS</A></P> Mon, 06 Jun 2016 18:27:33 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287348#M10889 rdagan_splunk 2016-06-06T18:27:33Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287349#M10890 <P>We wonder about the usage of shuttl - an open source software which is listed at -</P> <P><A href="https://splunkbase.splunk.com/app/1195/#/documentation">shuttl</A></P> <P>It says -</P> <P>-- Shuttl works on the bucket level, and leverages the standard Splunk mechanism for archiving data based on total data size or time expiration.</P> <P>What do you think about it?</P> Mon, 06 Jun 2016 19:31:42 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287349#M10890 ddrillic 2016-06-06T19:31:42Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287350#M10891 <P>Right, but we are looking for a backup solution not an archiving one...</P> Mon, 06 Jun 2016 19:34:37 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287350#M10891 ddrillic 2016-06-06T19:34:37Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287351#M10892 <P>I would not recommend you use Shuttl. It has not been maintained in over 3 years and was not tested on Splunk 6.* and would recommend you use Hunk Archiving or Hadoop Connect export.</P> Tue, 07 Jun 2016 05:03:43 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287351#M10892 rdagan_splunk 2016-06-07T05:03:43Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287352#M10893 <P>Much appreciated. But even if it was supported, does moving the Splunk buckets, result in a Hunk "certified" underlying indexes? </P> Tue, 07 Jun 2016 10:31:10 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287352#M10893 ddrillic 2016-06-07T10:31:10Z https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287353#M10894 <P>Yes, both Hunk Archiving and Hadoop Connect App export are a certified solution. </P> Tue, 07 Jun 2016 18:20:33 GMT https://community.splunk.com/t5/Deployment-Architecture/Is-there-a-solution-to-back-up-Splunk-data-into-HDFS-to-make-it/m-p/287353#M10894 rdagan_splunk 2016-06-07T18:20:33Z