All Apps and Add-ons

process to move indexes

ankithreddy777
Contributor

what is the process to move indexes from one splunk deployment controlled by deployment server A to other splunk deployment controlled by deployment server B

0 Karma

Richfez
SplunkTrust
SplunkTrust

Indexes don't particularly care what DS they're created from. They just exist. Granted, they may have been created from the configurations provided by a particular DS, but that's just configurations.

What I'd suggest is to review your serverclass.conf and indexes.conf files in your deployment apps folders on the original DS and find all the serverclasses that deploy indexes to your indexers. Then copy the stanza(s) from the serverclasses and the indexes from indexes.conf to the new DS, then restart it and you should be good.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...