Most of the time, I don't backup data unless customer insist to take backup and provides storage. but it's recommended to take backup of $SPLUNK_HOME/etc in case you would like to revert to old version for any reason. In that case backup is required as there is no roll-back option in Splunk.
Most of the time, I don't backup data unless customer insist to take backup and provides storage. but it's recommended to take backup of $SPLUNK_HOME/etc in case you would like to revert to old version for any reason. In that case backup is required as there is no roll-back option in Splunk.
@thambisetty How to rollback changes if we face any issue during Splunk version upgradation?
Can you share me the documentation for it?
@richgalloway Do we need to backup Splunk bucket folder before we proceed with Splunk version upgrade? Or we can directly upgrade without taking backup of bucket folder?