Deployment Architecture

Known issues with backup systems

gcusello
SplunkTrust
SplunkTrust

Hi at all,
I have a Splunk server all-in-one, version 6.5.2 running on Windows 2012/R2.
There is a backup system based on HP Data Protector 9 that perform a weekly full backup and a daily incremental backup.
Backup was OK until three week ago when incremental backup passed from the usually around 3 GB/day to 65 GB/day and duration passed from 1 hour to 7-8 hours.
There wasn't any reason for this growth, but I noted that usually there is an error "device busy" on some files in _internaldb folder.

So someone knows any known issue using HP Data Protector or another backup system?
Someone registered similar problems?

Thank you.
Bye.
Giuseppe

0 Karma
1 Solution

gfuente
Motivator

Hello

Are you excluding the Hot Buckets from the backup? Those folders can´t be backup with regular backup tools.

You can force the buckets roll to warm:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Backupindexeddata#Rolling_buckets_manually...

regards

View solution in original post

gfuente
Motivator

Hello

Are you excluding the Hot Buckets from the backup? Those folders can´t be backup with regular backup tools.

You can force the buckets roll to warm:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Indexer/Backupindexeddata#Rolling_buckets_manually...

regards

Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...