Deployment Architecture

How to export indexes to a new index server in the cluster

fuster_j
Path Finder

I'm adding another index server into a cluster of distributed search indexes. What is the easiest way to export the custom indexes in the existing index servers to the new server beside manually adding each index by hand and copy the indexes.conf to the new one?

0 Karma

fuster_j
Path Finder

Thanks! I just script to manually create the indexes in cli.

0 Karma

Takajian
Builder

If you are going to forwarder, you can use helpful function of deployment server and client in order to share any configuration files. But I think copying the indexes.conf to the new index server is the easiest way to achieve it. Otherwise, you can use rsync command on linux server.

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...