Deployment Architecture

How to backup the GUI

appmandan
Path Finder

I have been researching how to backup splunk, and a lot of the information I'm finding pertains to the indexes. Is there a way for me to back up my custom settings within the GUI? (saved searches, navs, views, etc.) My Splunk instance is running on a physical machine and I'd like to be able to back up the GUI in case of system crash.

Thanks!

Tags (2)
0 Karma
1 Solution

MHibbin
Influencer

You simply need to create a backup of $SPLUNK_HOME/etc this is where most (if not ALL) configurations are stored. You could also simply back up everything except the indexes (if space is an issue).

Here is the Splunk docs about backups.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Backupconfigurationinformation

Hope this answers your question.

If it does answer you question, please mark the question as answered to help the community.

Regards,

Matt

View solution in original post

MHibbin
Influencer

You simply need to create a backup of $SPLUNK_HOME/etc this is where most (if not ALL) configurations are stored. You could also simply back up everything except the indexes (if space is an issue).

Here is the Splunk docs about backups.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Backupconfigurationinformation

Hope this answers your question.

If it does answer you question, please mark the question as answered to help the community.

Regards,

Matt

MHibbin
Influencer

so if you are on a nix machine you could tar czvf splunkback.tgz $SPLUNK_HOME/etc.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...