Splunk Migration from existing server to a new server

[kvm]

Hi,

I have a requirement to upgrade RHEL from version 7.9 to 8.X, and our infrastructure team is currently in the process of building a new set of servers running on RHEL 8.X. Consequently, I will need to migrate Splunk from the existing RHEL OS 7.9 to 8.X.

Our Splunk architecture is on-premise and includes multiple Search Heads (SHs) in a cluster, Indexers in a cluster, and various other components.

Has anyone here performed a migration from one OS to another version of the same OS before? Could I please get some guidelines on how to perform this, especially concerning clustered components?

I have checked the below steps:

• Stop Splunk Enterprise services
• Copy the entire contents of the $SPLUNK_HOME directory from the old host to the new host.
• Install Splunk Enterprise on the new host.
• Start Splunk Enterprise on the new instance.

and specifically looking for the any additional steps that need to be performed, particularly for clustered components.

Thank you.

Kiran

[isoutamo]

Hi

here is some old answers about this:

• https://community.splunk.com/t5/Installation/Upgrading-and-migrating-to-a-new-host-how-to-migrate-la...
• https://community.splunk.com/t5/Splunk-Enterprise/Migration-of-Splunk-to-different-server-same-platf...
• https://community.splunk.com/t5/Installation/What-are-the-steps-for-Splunk-enterprise-migration-phys... when something goes wrong.

r. Ismo