topic Re: Transfering data from one index to another in Getting Data In

Transfering data from one index to another

linu1988 — Wed, 07 Aug 2013 20:19:21 GMT

Hello Everyone,
Is there any functionality in splunk to tranfer event from one to other index source/sourcetype wise? It would help with negating rework/data loss.

Thanks

Re: Transfering data from one index to another

lguinn2 — Wed, 07 Aug 2013 21:16:24 GMT

Sorry. The only thing you can do is to find the original data and export it to a flat file, and then re-index it as desired. I don't think this is what you wanted, but AFAIK there is no way to transfer data from one index to another.

Re: Transfering data from one index to another

linu1988 — Thu, 08 Aug 2013 21:22:30 GMT

No this is not what i want or many want. This would be another hottest release for future splunk release with some more enhancement which i think is not at all good and requires so much effort for simple things.

Btw like always love to hear from you Guru's, Learn so much just from reading your comments

Re: Transfering data from one index to another

lguinn2 — Thu, 08 Aug 2013 23:57:44 GMT

This is not necessarily easy or desirable for Splunk - as Splunk is not a DBMS.