Getting Data In

Archive some of indexes in a separate disk.

ayush1906
Path Finder

I am currently migrating my splunk instance to a new environment.

The problem is we are having some old index, in which no new data is being added. I want to archive them in my backup so that I could limit my data to be copied to new instance.

Plus there might be the use of those indexed data in the future as need-on-basis.

Is there any path I should copy for my data

Also, which of the conf needs to be copied.

0 Karma

gcusello
Esteemed Legend

Hi @ayush1906,
to manage old data you can follow two approaches:

Ciao.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...