Hi all,
I need to migrate heavy forwarders, search head cluster and search head deployer, cluster manager, license manager, deployment server from vm in a different site. The hostname wouldn't change, just the IP.
I know all configuration are done with hostnames and not IPs.
I wonder if would be ok to just stop splunk, copy the entire vm to the other site, and start splunk each vm one by one ore I am missing something here....any ideas?
Thanks,
Marta
Yes you can do it, as suggested by others check DNS resolution, FW rules, routing, etc...
If you have multiple HFs in HA, start from one of them so you can intercept the issues
The overall idea is sound but you have to remember that OS level name resolver can cache entries. Dealing with it might require different things on different OS-es.
As long as you are using hostnames and the hostname can resolve successfully to the new IP and there are no firewall or routing/network changes/issues between the hosts then this shouldnt be a problem.
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing