I have been researching how to backup splunk, and a lot of the information I'm finding pertains to the indexes. Is there a way for me to back up my custom settings within the GUI? (saved searches, navs, views, etc.) My Splunk instance is running on a physical machine and I'd like to be able to back up the GUI in case of system crash.
Thanks!
You simply need to create a backup of $SPLUNK_HOME/etc this is where most (if not ALL) configurations are stored. You could also simply back up everything except the indexes (if space is an issue).
Here is the Splunk docs about backups.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Backupconfigurationinformation
Hope this answers your question.
If it does answer you question, please mark the question as answered to help the community.
Regards,
Matt
You simply need to create a backup of $SPLUNK_HOME/etc this is where most (if not ALL) configurations are stored. You could also simply back up everything except the indexes (if space is an issue).
Here is the Splunk docs about backups.... http://docs.splunk.com/Documentation/Splunk/latest/Admin/Backupconfigurationinformation
Hope this answers your question.
If it does answer you question, please mark the question as answered to help the community.
Regards,
Matt
so if you are on a nix machine you could tar czvf splunkback.tgz $SPLUNK_HOME/etc.