topic Re: Move bucket between 2 different Splunks in Getting Data In

Move bucket between 2 different Splunks

hketer — Wed, 30 Sep 2020 03:20:46 GMT

Hi Everyone!

I've tested the transferring buckets between 2 different Splunks, both of them are Win.
Transferred .bucketManifest file and hot_v1_0 folder from the old Splunk to the New.
After restart I still cant see the data.
I also tried to transfer the the db folder .

What am I missing?
Please assist.

Thank you!! 🙂

Re: Move bucket between 2 different Splunks

hketer — Tue, 10 Dec 2019 10:24:58 GMT

Splunk version - Win 7.3

Re: Move bucket between 2 different Splunks

schose — Tue, 10 Dec 2019 12:12:59 GMT

Hi,

you can just copy one index to another host (as far as there are single-instances) - there are no issues with that. just make sure your settings for indexes.conf are the same and file permissions are set accordingly.

This also works for clustered enviorments with a little more efford.

Regards,

Andreas

Re: Move bucket between 2 different Splunks

hketer — Tue, 10 Dec 2019 13:09:46 GMT

Thank you for answering!
I did all of these and yet I cant search the data.