Deployment Architecture

Known issues with backup systems

gcusello
SplunkTrust
SplunkTrust

Hi at all,
I have a Splunk server all-in-one, version 6.5.2 running on Windows 2012/R2.
There is a backup system based on HP Data Protector 9 that perform a weekly full backup and a daily incremental backup.
Backup was OK until three week ago when incremental backup passed from the usually around 3 GB/day to 65 GB/day and duration passed from 1 hour to 7-8 hours.
There wasn't any reason for this growth, but I noted that usually there is an error "device busy" on some files in _internaldb folder.

So someone knows any known issue using HP Data Protector or another backup system?
Someone registered similar problems?

Thank you.
Bye.
Giuseppe

0 Karma
1 Solution

gfuente
Motivator

Hello

Are you excluding the Hot Buckets from the backup? Those folders can´t be backup with regular backup tools.

You can force the buckets roll to warm:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Backupindexeddata#Rolling_buckets_manually...

regards

View solution in original post

gfuente
Motivator

Hello

Are you excluding the Hot Buckets from the backup? Those folders can´t be backup with regular backup tools.

You can force the buckets roll to warm:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Backupindexeddata#Rolling_buckets_manually...

regards

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...