I noticed several Splunkbase that can facilitate the backup and restore process, such as the following.
Git Version Control for Splunk - https://splunkbase.splunk.com/app/4182/#/overview
Version Control for Splunk - https://splunkbase.splunk.com/app/4355/#/overview
Stateful Snapshot for Splunk - https://splunkbase.splunk.com/app/4122/
Has anyone used these and have recommendations for ideal ones for backing up and restoring conf files and knowledge objects across Splunk components (search heads, deployment server, cluster master) and installed apps/add-ons?
Hi
you should look this answer. https://community.splunk.com/t5/Archive/How-to-Backup-Config-Files/td-p/478357
It contains link to conf presentatio how to do it.
r. Ismo
That looks quite complicated since we would need a script for each and every Splunk app and add-on that we're also using.
Wouldn't any of the apps that I listed above work? The main use case here is being able to backup Splunk KO's and conf files from our Splunk Production environment, and then being able to restore them to a Disaster Recovery environment in the event that Production is unavailable.