Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Can I migrate to a new Splunk server without re-c...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'd like to change my Splunk server to a different Linux distribution from Fedora to Centos. Indexer, search head and splunk web is all running off of one singer server for now. If I give the new Splunk server the same IP as the existing server after shutting down the old server, do I need to do any reconfiguration of all my splunk forwarders?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Correct; as long as your new server has the same IP address (or hostname, depending on what you had in your configuration files, e.g. outputs.conf), everything will work just fine. Since you are going back and "getting things right", you should make sure that you setup both a Deployment Server and a Management Console, too.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Correct; as long as your new server has the same IP address (or hostname, depending on what you had in your configuration files, e.g. outputs.conf), everything will work just fine. Since you are going back and "getting things right", you should make sure that you setup both a Deployment Server and a Management Console, too.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
are the forwarders outputs.conf is by IP or servername?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It is by IP
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
will ask community to verify but i think you will be fine
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I believe they should be fine. Is your standalone instance a Deployment server as well?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Forwarder management was never configured on this instance. All the apps and forwarders were manually deployed and configured from each host.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So, as long as new standalone servers is same network configuration (IP, Firewall rule/cname etc if any), this should work just fine.
The All New Performance Insights for Splunk
Good Sourcetype Naming
See your relevant APM services, dashboards, and alerts in one place with the updated ...
