https://community.splunk.com/t5/Knowledge-Management/Backup-solutions-for-Splunk-indexes-warm-buckets/m-p/418114#M8049 <P>Has anyone come up with a solid solution for backing up Splunk for disaster recovery purposes? I've read a lot about what files we need to pull, and we've made some decisions based on utility (e.g. deployed splunkbase and custom apps will be version controlled through a local GitHub) but we're coming up empty on a decent paid or open-source backup management solution. </P> <P>Currently 6 indexers in a cluster with more spinning up soon, and a replication factor of 2. I've already received advice from Splunk PS re: what should and shouldn't be backed up. </P> <P>We looked into Zmanda for a commercial solution, but found it difficult to purchase through existing procurement, The OSS version - Amanda - has proven to be quite difficult to configure thanks to lackluster documentation.</P> <P>We've got some budget to get software if needed, and already have a server with sufficient disk storage. Just trying to find the glue to get it up and running. Thanks!</P> Tue, 30 Jul 2019 19:30:44 GMT mricharf 2019-07-30T19:30:44Z https://community.splunk.com/t5/Knowledge-Management/Backup-solutions-for-Splunk-indexes-warm-buckets/m-p/418114#M8049 <P>Has anyone come up with a solid solution for backing up Splunk for disaster recovery purposes? I've read a lot about what files we need to pull, and we've made some decisions based on utility (e.g. deployed splunkbase and custom apps will be version controlled through a local GitHub) but we're coming up empty on a decent paid or open-source backup management solution. </P> <P>Currently 6 indexers in a cluster with more spinning up soon, and a replication factor of 2. I've already received advice from Splunk PS re: what should and shouldn't be backed up. </P> <P>We looked into Zmanda for a commercial solution, but found it difficult to purchase through existing procurement, The OSS version - Amanda - has proven to be quite difficult to configure thanks to lackluster documentation.</P> <P>We've got some budget to get software if needed, and already have a server with sufficient disk storage. Just trying to find the glue to get it up and running. Thanks!</P> Tue, 30 Jul 2019 19:30:44 GMT https://community.splunk.com/t5/Knowledge-Management/Backup-solutions-for-Splunk-indexes-warm-buckets/m-p/418114#M8049 mricharf 2019-07-30T19:30:44Z https://community.splunk.com/t5/Knowledge-Management/Backup-solutions-for-Splunk-indexes-warm-buckets/m-p/418115#M8050 <P>Greetings @mricharf,</P> <P>Have you read the following articles?</P> <UL> <LI><A href="https://www.splunk.com/blog/2011/12/20/index-backup-strategy.html">https://www.splunk.com/blog/2011/12/20/index-backup-strategy.html</A></LI> <LI><A href="https://www.splunk.com/blog/2012/02/21/restoring-an-index.html">https://www.splunk.com/blog/2012/02/21/restoring-an-index.html</A></LI> <LI><A href="https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Backupindexeddata">https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Backupindexeddata</A></LI> </UL> Tue, 30 Jul 2019 20:06:29 GMT https://community.splunk.com/t5/Knowledge-Management/Backup-solutions-for-Splunk-indexes-warm-buckets/m-p/418115#M8050 jacobpevans 2019-07-30T20:06:29Z