Deployment Architecture

How to migrate Heavy Forwarder from Windows server to Linux Server

Jagadeesh2022
Path Finder

Hi All,

Currently we are using 3 Heavy Forwarder in Windows server. Due to budget problem we are planning to move all HF to Linux server. 

Kindly guide and suggest how to move HF from Windows to Linux. 

How to copy to already installed apps and existing settings and configuration files from windows to Linux?

Thank in advance for your reply.

 

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Splunk config files and most apps are platform-agnostic.  The files can be copied directly from %SPLUNK_HOME%/etc/system to $SPLUNK_HOME/etc/system and from %SPLUNK_HOME%/etc/apps to $SPLUNK_HOME/etc/apps.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @Jagadeesh2022,

as @richgalloway said, you can use the same configurations passing from Windows to Linux, you have only to put attention on to issues:

  • if you have to read local files, you have to change the path ("/" instead of "\") of the files to read,
  • you need of TA-Linux instead TA-Windows to monitor the machine. 

One addition information: You said that you have to change for budget reasons, in general, I hint to use Linux instead Windows in all the servers to run Splunk: I never saw large Splunk production infrastructures using Windows!

Ciao.

Giuseppe

Jagadeesh2022
Path Finder

Thank you @gcusello 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk config files and most apps are platform-agnostic.  The files can be copied directly from %SPLUNK_HOME%/etc/system to $SPLUNK_HOME/etc/system and from %SPLUNK_HOME%/etc/apps to $SPLUNK_HOME/etc/apps.

---
If this reply helps you, Karma would be appreciated.

Jagadeesh2022
Path Finder

Thank you @richgalloway 

0 Karma
Get Updates on the Splunk Community!

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...