topic Re: How do I move data from one index to another? in Installation

How do I move data from one index to another?

patricianaguit — Mon, 15 Jun 2020 18:30:40 GMT

Is it possible to archive/move/transfer data from one index to another?

The scenario is that the old index is almost full, and the old data need to be moved from the new index.
Once the old data are moved, the old data must be deleted from the old index, and must only appear in the new index.

Are there possible ways to do it? Would appreciate your suggestions!

Re: How do I move data from one index to another?

adonio — Thu, 13 Dec 2018 02:46:54 GMT

yes it is very much possible and many answers to that challenge are right here at answers.slpunk.com
here are some answers:
https://answers.splunk.com/answers/294691/how-to-move-indexed-data-from-one-index-to-other-i-1.html
https://answers.splunk.com/answers/610941/migrate-from-one-index-to-another-index-with-data.html
https://answers.splunk.com/answers/563854/copy-indexed-data-from-one-index-to-another-index.html
https://answers.splunk.com/answers/400563/best-approach-to-move-data-to-a-different-index.html
https://answers.splunk.com/answers/126422/move-specific-data-from-one-index-to-another-index.html

hope it helps

Re: How do I move data from one index to another?

patricianaguit — Wed, 19 Dec 2018 01:09:49 GMT

Thank you! This helps 🙂

Re: How do I move data from one index to another?

jfuller19 — Tue, 01 Mar 2022 10:06:52 GMT

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Collect