I will be moving an existing Splunk installation (and all the data, inputs and customizations, etc) over to a new server (Linux to Linux) and from what I gathered from all the documentation, the process would be this:
Install a default Splunk installation on the new server
Make sure Splunk is not running on both servers
Copy the entire install directory (/opt/splunk/ in my case) from the old server to the new server overwriting all files
Start Splunk on the new server
Is this the entire process for a Linux to Linux server migration? I just need clarification because there are conflicting pieces of advice on whether you copy the files over first and then install Splunk on top, or install Splunk first and then copy the files over the new installation.