topic Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM in Getting Data In

What are the steps for a Splunk SH Migration from Cent OS to REDHAT from one VM to another VM?

kiranhar — Mon, 24 Oct 2022 13:24:08 GMT

Team,

I need your assistance with the below task.

I need to migrate Splunk sh-2 (Non ES instance) from Cent OS to REDHAT from one VM to another VM.

I would appreciate it if you can provide step by step guide for this migration.

Note: We need to maintain the same IP address / Host Name of the existing VM ( Splunk Server).

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Mon, 24 Oct 2022 08:08:48 GMT

Hi @kiranhar,

folow these steps:

stop Splunk on the old SH,
tar all the /opt/splunk folder
copy the tar file in another system,
stop the old VM,
run the new VM,
copy the tar file on the new VM,
create the splunk user splunk group,
untar the tar file,
run Splunk,
run the command to automaticall start Splunk at boot (/opt/splunk/bin/splunk enable boot-start).

It's different is you have a different IP or hostname.

Ciao.

Giuseppe

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

kiranhar — Mon, 24 Oct 2022 08:26:17 GMT

Hi,

Thanks for your respons. No, it is the same IP and Host to maintain on the new VM.

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Mon, 24 Oct 2022 08:37:37 GMT

Hi @kiranhar,

ok, so the path is the one I described in my previous post.

tell me if I can help you more, otherwise, please accept one answer for the other people of Community.

Ciao.

Giuseppe

P.S.: Karma Points are appreciated 😉

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

kiranhar — Mon, 24 Oct 2022 08:44:24 GMT

Thanks. Also, please advise, on how to create a Splunk user and Splunk group on the new Linux Server (Redhat). Please provide the steps.

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Mon, 24 Oct 2022 08:53:28 GMT

Hi @kiranhar,

I'm sorry but I'm a little rusty on Linux, anyway, you can find this on Google:

https://linuxize.com/post/how-to-add-user-to-group-in-linux/

or something else.

Ciao.

Giuseppe

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

kiranhar — Tue, 25 Oct 2022 09:46:40 GMT

Hi Thanks for your response.

We wanted to keep the old setup until we migrate Splunk to the new VM. So, we have a new VM with new IP and new Hostname, later will change the IP and Host Name on the new Server as old one. Please advise on the steps for this scenario.

Awaiting your response.

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Tue, 25 Oct 2022 13:03:22 GMT

Hi @kiranhar,

if you want to migrate to another VM with different hostname and IP, you have to follow the same procedure, but, before restart the new VM, you have to manually modify the following conf files:

$SPLUNK_HOME/etc/system/local/server.conf
$SPLUNK_HOME/etc/system/local/inputs.conf

replacing the old hostname with the new one.

Ciao.

Giuseppe

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Fri, 28 Oct 2022 06:10:26 GMT

Hi @kiranhar,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

Arun — Thu, 05 Oct 2023 13:36:10 GMT

Hello @gcusello ,

I've followed the same method of migration as you reffered here. But when the entire setup is migrated from CentOS to RHEL. From backend all looks working fine but just the web UI does not comes up.

I tried doing multiple things but now luck.

- inputs and server. Conf has the same host name as of servers

- port 800 never comes up to listening state. Other ports are working as expected like 8089.8088 etc

-tired untaring the splunk package file on the new server as with the same version but no luck.

The web log and splunk.log files under opt/splunk/var/log/splunk directory also does not speak anything about the issue

Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM

gcusello — Thu, 05 Oct 2023 13:52:26 GMT

Hi @Arun,

at first, I hint to open a different question, instead using an already closed one, this is better to you to have more answers.

Anyway, did you disabled local firewall (firewalld) on Red Hat?

I didn't experience the issues you describe, check the local firewall and the grants on the user you're using.

Ciao.

Giuseppe