Splunk data backup and restore

[rameshlpatel]

Hi,

My splunk server has been crashed and now I need to reinstall it. But I want to take backup of existing data present in current splunk.

How we could take backup and restore that in new splunk instance ?

[Lazarix]

What operating system?

In Linux, your indexes are stored in
/opt/splunk/var/lib/splunk

Your apps are stored in /opt/splunk/etc/apps
You may be better off installing a new virtual machine and doing a restore to that so that you don't compromise your existing system.