<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Transfer existing events to new volume in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Transfer-existing-events-to-new-volume/m-p/683688#M114133</link>
    <description>&lt;P&gt;The old events cannot be searched because they're on the old volume.&amp;nbsp; Indexers have only one volume definition so they only know the current volume.&lt;/P&gt;&lt;P&gt;Use OS tools to copy the directories from the old volume to the new one then restart the indexers.&lt;/P&gt;</description>
    <pubDate>Tue, 09 Apr 2024 13:24:02 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2024-04-09T13:24:02Z</dc:date>
    <item>
      <title>Transfer existing events to new volume</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Transfer-existing-events-to-new-volume/m-p/683684#M114132</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;I created a volume and changed all homePath for all indexes to use this volume.&lt;BR /&gt;Now I can't search on events that existed before this volume was created, and the search heads only show events that are on this volume.&lt;BR /&gt;How can I move old and existing events to this volume so I can search on them?&lt;/P&gt;&lt;P&gt;Thank you.&lt;/P&gt;</description>
      <pubDate>Tue, 09 Apr 2024 12:34:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Transfer-existing-events-to-new-volume/m-p/683684#M114132</guid>
      <dc:creator>sigma</dc:creator>
      <dc:date>2024-04-09T12:34:52Z</dc:date>
    </item>
    <item>
      <title>Re: Transfer existing events to new volume</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Transfer-existing-events-to-new-volume/m-p/683688#M114133</link>
      <description>&lt;P&gt;The old events cannot be searched because they're on the old volume.&amp;nbsp; Indexers have only one volume definition so they only know the current volume.&lt;/P&gt;&lt;P&gt;Use OS tools to copy the directories from the old volume to the new one then restart the indexers.&lt;/P&gt;</description>
      <pubDate>Tue, 09 Apr 2024 13:24:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Transfer-existing-events-to-new-volume/m-p/683688#M114133</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-04-09T13:24:02Z</dc:date>
    </item>
  </channel>
</rss>

