Deployment Architecture

Automate Splunk configuration files backup on day basis

splunkwar
Explorer

Hi,

I'd like to automate Splunk config files backup process for every 24 hours.

Is there any Apps/Scripts available to achieve the same.

Many thanks.

1 Solution

manjunathmeti
Champion

You can compress $SPLUNK_HOME/etc/ and keep backup of compressed file. A simple shell script can do this and you can schedule it for every 24 hours using cron.

/backup.sh

#!/bin/bash
TIME=`date +%b-%d-%y`                      # This Command will read the date.
FILENAME=splunk-configs-backup-$TIME.tar.gz    # The filename including the date.
SRCDIR=/opt/splunk/etc                       # Source backup folder.
DESDIR=/backup                                    # Destination of backup file.
tar -cpzf $DESDIR/$FILENAME $SRCDIR

Cron expression:

00 04 * * * /bin/bash /backup.sh

This will run the script every day at 04:00:00.

View solution in original post

manjunathmeti
Champion

You can compress $SPLUNK_HOME/etc/ and keep backup of compressed file. A simple shell script can do this and you can schedule it for every 24 hours using cron.

/backup.sh

#!/bin/bash
TIME=`date +%b-%d-%y`                      # This Command will read the date.
FILENAME=splunk-configs-backup-$TIME.tar.gz    # The filename including the date.
SRCDIR=/opt/splunk/etc                       # Source backup folder.
DESDIR=/backup                                    # Destination of backup file.
tar -cpzf $DESDIR/$FILENAME $SRCDIR

Cron expression:

00 04 * * * /bin/bash /backup.sh

This will run the script every day at 04:00:00.

SamHTexas
Builder

Which Splunk Server do I run this script, where should be the place / path for this script to run ?

Tags (1)
0 Karma

SamHTexas
Builder

How do I add the cron expression to the stanza please for it to run every 24 hours on weekends for examples. Thank u

Tags (1)
0 Karma

splunkwar
Explorer

Hi, Thanks for the answer.
I have python script, which will do the same. could you please tell me , where should I add this script (directory) & how would I schedule to run for every 24 hours ?
Thanks in advance!

0 Karma

manjunathmeti
Champion

You can copy this script on /opt/splunk/bin/scripts and make it executable and add cron expression in crontab.

# chmod +x /opt/splunk/bin/scripts/test.py
# crontab -e

0 0 * * * /usr/bin/python /opt/splunk/bin/scripts/test.py

Save it. This will trigger this script everyday at midnight.

0 Karma

splunkwar
Explorer

Thanks a lot 🙂

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...