Splunk Dev

how to copy data from one indexer to another indexer?

Kratika
New Member

Hi,

We are going to install a new indexer on same host where our old indexer is running as our splunk license is going to expire. Can you please let me know how we can copy the whole data(configuration and all other data) from old indexer to the new indexer.

Thanks & Regards,
Kratika

Tags (2)
0 Karma

mship
Path Finder

If you are on windows and use xcopy. I will simplify for sake of space

xcopy "C:<path to indexes>" "\\C:<path to index>" (options ex: /e /c /s ...)

0 Karma

RicoSuave
Builder

http://www.splunk.com/base/Documentation/latest/Admin/Whatyoucanbackup

You'll find all the info you need here.

Maybe i'm misunderstanding, but why not just upgrade the license?

0 Karma

Drainy
Champion

Hi,

One of my early questions was similar to this. I had one indexer running and a few days later installed a new one remotely. When I set it to forward it only forwarded everything from that point.
Here is my question

The answer I got was that I needed to physically copy/paste the buckets over from one to the other, I would assume the same case for the configuration files

Here is the link on migrating indexes
http://www.splunk.com/wiki/Community:MoveIndexes

Hope this helps

0 Karma
Get Updates on the Splunk Community!

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...