topic Re: How to migrate Splunk Heavy Forwarder to a new server? in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511845#M17582 <P>Hi</P><P>remember that you must copy splunk.secret before you start HF first time.&nbsp;<BR />Otherwise your plan should work. If there are some other apps with different versions I would like to start with current version and then update it. Of course there are some exceptions for that. And remember shutdown those apps/inputs before you copy data and checkpoints to the new HF otherwise there will be duplicate events.&nbsp;<BR />r. Ismo</P> Thu, 30 Jul 2020 19:37:36 GMT isoutamo 2020-07-30T19:37:36Z How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511798#M17575 <P class="lia-align-left">Hi all, how to migrate Splunk Heavy Forwarder to a new server?&nbsp;&nbsp;</P><P class="lia-align-left">Thanks.</P> Thu, 30 Jul 2020 16:43:25 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511798#M17575 lucas4394 2020-07-30T16:43:25Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511799#M17576 <P>Hi</P><P>is it mandatory to migrate it or just add new one and remove old when the new is in the use?</P><P>r. Ismo</P> Thu, 30 Jul 2020 16:46:28 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511799#M17576 isoutamo 2020-07-30T16:46:28Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511814#M17577 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410">@isoutamo</a>&nbsp;, thank you for your quick response.&nbsp; We are going to retire the old servers and it is mandatory to migrate the Heavy Forwarder to the new servers.&nbsp; My major concern is there are lots of apps with module inputs, api call, dbconnect, etc. with encrypted password or security keys on the HF, and last checkpoints are might be stored some common folders, etc.&nbsp; What is the best way to handle them?&nbsp; Thanks.</P> Thu, 30 Jul 2020 17:20:48 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511814#M17577 lucas4394 2020-07-30T17:20:48Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511821#M17578 <P>Can you do rpm installations and then rsync data’s and applications from here old one or do you need to update versions at the same time or later?</P><P>r. Ismo</P> Thu, 30 Jul 2020 17:40:44 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511821#M17578 isoutamo 2020-07-30T17:40:44Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511830#M17580 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410">@isoutamo</a>&nbsp;, my initial plan was to install the new version of Splunk on the new server, then migrate apps by apps to the new one, but&nbsp; I don't have confidence for my approach due to encrypted password and last checkpoint from the apps.</P> Thu, 30 Jul 2020 18:10:40 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511830#M17580 lucas4394 2020-07-30T18:10:40Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511835#M17581 <P>Copying the splunk.secret from the old heavy forwarder to the new one should help with the passwords.</P> Thu, 30 Jul 2020 18:40:10 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511835#M17581 ChrisH 2020-07-30T18:40:10Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511845#M17582 <P>Hi</P><P>remember that you must copy splunk.secret before you start HF first time.&nbsp;<BR />Otherwise your plan should work. If there are some other apps with different versions I would like to start with current version and then update it. Of course there are some exceptions for that. And remember shutdown those apps/inputs before you copy data and checkpoints to the new HF otherwise there will be duplicate events.&nbsp;<BR />r. Ismo</P> Thu, 30 Jul 2020 19:37:36 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511845#M17582 isoutamo 2020-07-30T19:37:36Z Re: How to migrate Splunk Heavy Forwarder to a new server? https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511866#M17583 <P>thanks.</P> Thu, 30 Jul 2020 22:47:02 GMT https://community.splunk.com/t5/Deployment-Architecture/How-to-migrate-Splunk-Heavy-Forwarder-to-a-new-server/m-p/511866#M17583 lucas4394 2020-07-30T22:47:02Z