One of our customers wonders whether it's possible to change an index name. Is it possible?
see here:
https://answers.splunk.com/answers/177533/how-to-rename-an-index-in-splunk-6.html
and here:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Indexer/Moveanindex
dont forget ot change all inputs.conf on sources who send data to the index
see here:
https://answers.splunk.com/answers/177533/how-to-rename-an-index-in-splunk-6.html
and here:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Indexer/Moveanindex
dont forget ot change all inputs.conf on sources who send data to the index