https://community.splunk.com/t5/Deployment-Architecture/Splunk-Indexed-Data-Backup/m-p/524575#M18079 <P>Can we take full backup of entire var directory on the Splunk indexer machine if we have enough available space?</P> Wed, 14 Oct 2020 10:00:41 GMT sanjubaba 2020-10-14T10:00:41Z https://community.splunk.com/t5/Deployment-Architecture/Splunk-Indexed-Data-Backup/m-p/524575#M18079 <P>Can we take full backup of entire var directory on the Splunk indexer machine if we have enough available space?</P> Wed, 14 Oct 2020 10:00:41 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Indexed-Data-Backup/m-p/524575#M18079 sanjubaba 2020-10-14T10:00:41Z https://community.splunk.com/t5/Deployment-Architecture/Splunk-Indexed-Data-Backup/m-p/524579#M18080 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/226156">@sanjubaba</a>&nbsp;Yes, taking full back up of entire var directory is good, even the full /opt/splunk backup is better (the config files under /opt/splunk/etc/ will be backed up).</P><P>&nbsp;</P><P>more details:</P><P><A href="https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Backupindexeddata" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Backupindexeddata</A></P><P>&nbsp;</P> Wed, 14 Oct 2020 10:20:23 GMT https://community.splunk.com/t5/Deployment-Architecture/Splunk-Indexed-Data-Backup/m-p/524579#M18080 inventsekar 2020-10-14T10:20:23Z