https://community.splunk.com/t5/Getting-Data-In/Replicate-VM-Splunk-to-second-VM/m-p/73068#M14937 <P>Yes you can, as long as it is a true snapshot. The host names in Splunk will be in etc/system/inputs.conf and etc/system/server.conf, plus any other places you might have configured it. Any indexed data that references the local host name will still have the same host name when replicated, and that can not be easily changed, so you might want to use a logical/virtual host name in inputs.conf to manage this. </P> Wed, 20 Oct 2010 01:43:27 GMT gkanapathy 2010-10-20T01:43:27Z https://community.splunk.com/t5/Getting-Data-In/Replicate-VM-Splunk-to-second-VM/m-p/73067#M14936 <P>We are planning on having two instances of Splunk running in different geographical locations. The machines will be part of mirrored server farms. Can we take a snapshot of the primary Splunk implementation and mount it on the second machine? Specifically, can we rename the new host without difficulty?</P> Wed, 20 Oct 2010 01:24:36 GMT https://community.splunk.com/t5/Getting-Data-In/Replicate-VM-Splunk-to-second-VM/m-p/73067#M14936 kmattern 2010-10-20T01:24:36Z https://community.splunk.com/t5/Getting-Data-In/Replicate-VM-Splunk-to-second-VM/m-p/73068#M14937 <P>Yes you can, as long as it is a true snapshot. The host names in Splunk will be in etc/system/inputs.conf and etc/system/server.conf, plus any other places you might have configured it. Any indexed data that references the local host name will still have the same host name when replicated, and that can not be easily changed, so you might want to use a logical/virtual host name in inputs.conf to manage this. </P> Wed, 20 Oct 2010 01:43:27 GMT https://community.splunk.com/t5/Getting-Data-In/Replicate-VM-Splunk-to-second-VM/m-p/73068#M14937 gkanapathy 2010-10-20T01:43:27Z