How to backup the GUI

[appmandan]

I have been researching how to backup splunk, and a lot of the information I'm finding pertains to the indexes. Is there a way for me to back up my custom settings within the GUI? (saved searches, navs, views, etc.) My Splunk instance is running on a physical machine and I'd like to be able to back up the GUI in case of system crash.

Thanks!

[MHibbin · Accepted solution]

You simply need to create a backup of $SPLUNK_HOME/etc this is where most (if not ALL) configurations are stored. You could also simply back up everything except the indexes (if space is an issue).

Here is the Splunk docs about backups.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Backupconfigurationinformation

Hope this answers your question.

If it does answer you question, please mark the question as answered to help the community.

Regards,

Matt

[MHibbin]

so if you are on a nix machine you could tar czvf splunkback.tgz $SPLUNK_HOME/etc.