topic Re: Migrating Splunk Enterprise from one machine to other in Getting Data In

Migrating Splunk Enterprise from one machine to other

chintan_shah — Wed, 13 Sep 2017 19:01:38 GMT

Hi,

I need to migrate Splunk Enterprise from one machine to other machine. Currently I am running Splunk 6.4 and wants it to run on Splunk 6.6.

Could someone suggest me the steps to do the same? Should i install Splunk Enterprise 6.4 in new machine and then move all the indexers or then upgrade? or should i install Splunk 6.6 and then move all the indexers?

Re: Migrating Splunk Enterprise from one machine to other

rphillips_splk — Wed, 13 Sep 2017 19:22:25 GMT

@chintan_shah

You could upgrade to 6.6 on the old machine, install Splunk Enterprise 6.6 on the new machine and then follow steps to migrate a Splunk instance :

https://docs.splunk.com/Documentation/Splunk/6.6.3/Installation/MigrateaSplunkinstance

Re: Migrating Splunk Enterprise from one machine to other

chintan_shah — Thu, 14 Sep 2017 15:42:55 GMT

Hi @rphillips,
As per the documentation, they have mentioned to install Splunk after you have moved the data from one machine to other machine.

Re: Migrating Splunk Enterprise from one machine to other

rphillips_splk — Tue, 29 Sep 2020 15:45:18 GMT

@chintan_shah there shouldn't be an issue if you upgrade the old instance first then proceed with copying the entire contents of the $SPLUNK_HOME directory from the old host to the new host. or you can follow the steps from our docs:

1.]Stop Splunk Enterprise on the host from which you want to migrate.
2.]Copy the entire contents of the $SPLUNK_HOME directory from the old host to the new host.
3.]Install the appropriate version of Splunk Enterprise for the target platform.
4.]Confirm that index configuration files (indexes.conf) contain the correct location and path specification for any non-default indexes.
5.]Start Splunk Enterprise on the new instance.
6.]Log into Splunk Enterprise with your existing credentials.
7.]After you log in, confirm that your data is intact by searching it.

Re: Migrating Splunk Enterprise from one machine to other

chintan_shah — Fri, 15 Sep 2017 20:07:13 GMT

Hi @rphillips,

I have various apps,lookups,schedule searches, reports, dashboards and config file changes. Should all this files be present at Search Head or Indexer?