https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48918#M9285 <P>Is Splunk gonna charge us for this move?</P> Fri, 13 Oct 2017 17:51:00 GMT harry2007gsp 2017-10-13T17:51:00Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48914#M9281 <P>We've renamed an environment that was indexing to an identically named index. Currently, the renamed environment is indexing to the old name. Is there a way to rename an index? If so, how? </P> Tue, 26 Jul 2011 21:29:39 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48914#M9281 cosmic_cow 2011-07-26T21:29:39Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48915#M9282 <P>You can't really rename an index, but you can create a new index with the name you want (via indexes.conf/GUI) and move the data from the old index to the new index. </P> <P>You would need to stop Splunk, then move the <CODE>$SPLUNK_DB/&lt;old_index&gt;</CODE> directory to <CODE>$SPLUNK_DB/&lt;new_index&gt;</CODE> and then start Splunk. That should be all you'd need to do to get the data in the new index. Keep in mind any searches that reference the other index will need to be changed. </P> Tue, 26 Jul 2011 21:34:07 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48915#M9282 jbsplunk 2011-07-26T21:34:07Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48916#M9283 <P>Worked like a charm. Thank you.</P> Tue, 26 Jul 2011 21:56:12 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48916#M9283 cosmic_cow 2011-07-26T21:56:12Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48917#M9284 <P>Glad to hear that it worked, be sure to click the check box to accept the answer so it will show as you accepting it.</P> Tue, 26 Jul 2011 22:07:26 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48917#M9284 jbsplunk 2011-07-26T22:07:26Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48918#M9285 <P>Is Splunk gonna charge us for this move?</P> Fri, 13 Oct 2017 17:51:00 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48918#M9285 harry2007gsp 2017-10-13T17:51:00Z https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48919#M9286 <P>No. This administrative procedure moves the index files "underneath the hood" so to speak. The files are already parsed and do not go through the parsing/indexing phase again. Thus, no license meter.</P> Thu, 04 Jan 2018 06:38:22 GMT https://community.splunk.com/t5/Getting-Data-In/Rename-an-index-in-4-1-8/m-p/48919#M9286 churyn_splunk 2018-01-04T06:38:22Z