Deployment Architecture

Automate Splunk configuration files backup on day basis

splunkwar
Explorer

Hi,

I'd like to automate Splunk config files backup process for every 24 hours.

Is there any Apps/Scripts available to achieve the same.

Many thanks.

1 Solution

manjunathmeti
SplunkTrust
SplunkTrust

You can compress $SPLUNK_HOME/etc/ and keep backup of compressed file. A simple shell script can do this and you can schedule it for every 24 hours using cron.

/backup.sh

#!/bin/bash
TIME=`date +%b-%d-%y`                      # This Command will read the date.
FILENAME=splunk-configs-backup-$TIME.tar.gz    # The filename including the date.
SRCDIR=/opt/splunk/etc                       # Source backup folder.
DESDIR=/backup                                    # Destination of backup file.
tar -cpzf $DESDIR/$FILENAME $SRCDIR

Cron expression:

00 04 * * * /bin/bash /backup.sh

This will run the script every day at 04:00:00.

View solution in original post

manjunathmeti
SplunkTrust
SplunkTrust

You can compress $SPLUNK_HOME/etc/ and keep backup of compressed file. A simple shell script can do this and you can schedule it for every 24 hours using cron.

/backup.sh

#!/bin/bash
TIME=`date +%b-%d-%y`                      # This Command will read the date.
FILENAME=splunk-configs-backup-$TIME.tar.gz    # The filename including the date.
SRCDIR=/opt/splunk/etc                       # Source backup folder.
DESDIR=/backup                                    # Destination of backup file.
tar -cpzf $DESDIR/$FILENAME $SRCDIR

Cron expression:

00 04 * * * /bin/bash /backup.sh

This will run the script every day at 04:00:00.

SamHTexas
Builder

Which Splunk Server do I run this script, where should be the place / path for this script to run ?

Tags (1)
0 Karma

SamHTexas
Builder

How do I add the cron expression to the stanza please for it to run every 24 hours on weekends for examples. Thank u

Tags (1)
0 Karma

splunkwar
Explorer

Hi, Thanks for the answer.
I have python script, which will do the same. could you please tell me , where should I add this script (directory) & how would I schedule to run for every 24 hours ?
Thanks in advance!

0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

You can copy this script on /opt/splunk/bin/scripts and make it executable and add cron expression in crontab.

# chmod +x /opt/splunk/bin/scripts/test.py
# crontab -e

0 0 * * * /usr/bin/python /opt/splunk/bin/scripts/test.py

Save it. This will trigger this script everyday at midnight.

0 Karma

splunkwar
Explorer

Thanks a lot 🙂

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...