topic Re: Can I move a Splunk instance from Solaris 10 to Windows? in Installation

Can I move a Splunk instance from Solaris 10 to Windows?

mctester — Thu, 06 May 2010 09:53:46 GMT

We are looking at upgrading to 4.1.x of splunk, which I have the documentation for. However, I've also been asked to migrate over to Windows server, rather than the Solaris 10 splunk is currently sitting on. I have not found anything on Splunk's site or in documentation about this sort of migration.

Is there any documentation for this? Is there a preferred procedure? i.e. move to Windows first, then upgrade, or upgrade then move to Windows

We would like to keep all of the current indexes, if at all possible, as well as all current user configurations/preferences.

Re: Can I move a Splunk instance from Solaris 10 to Windows?

Dan — Thu, 06 May 2010 23:07:44 GMT

The Splunk indexes should be portable, as long as the Endian-ness of the chipset is the same. I'm not sure whether that's the case with Solaris and Windows, but you can try it by spinning up a new instance on Windows and copying a (warm) bucket over. By default these buckets are in the directory $SPLUNK_HOME/var/lib/splunk/defaultdb/db/

Re: Can I move a Splunk instance from Solaris 10 to Windows?

gkanapathy — Fri, 07 May 2010 04:14:25 GMT

For Solaris on Intel, the indexes will be compatible. For Solaris SPARC, they will not be.

Re: Can I move a Splunk instance from Solaris 10 to Windows?

gkanapathy — Fri, 07 May 2010 04:16:10 GMT

Please also look at some of the sections here:

http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install