Splunk Search

How to rename a database input from "db_input_1" to "db_input_X" without losing state.xml values and maintain data integrity?

ronak
Path Finder

Hi

I've defined database input "db_input_1" and that points to index "index_1"...the setup is in production meaning the state.xml has latest rising column values (for incremental extracts)

I've a need to rename the database input to "db_input_X".

What would be my steps to follow to be able to make the change so that I don't lose the state.xml value, and my data integrity is not disturbed.

thanks, ronak

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Hi, it won't work to do this. The architecturally different DB Connect 2 would work though.

0 Karma
Get Updates on the Splunk Community!

Unleash the Power of Splunk MCP and AI, Meet Us at .Conf 2025, and Find Even More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Professionals: Build Resilience and Visibility with These .conf25 ...

  If you're focused on performance, availability, and full-stack visibility, the Observability track at ...

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...