I am currently migrating my splunk instance to a new environment.
The problem is we are having some old index, in which no new data is being added. I want to archive them in my backup so that I could limit my data to be copied to new instance.
Plus there might be the use of those indexed data in the future as need-on-basis.
Is there any path I should copy for my data
Also, which of the conf needs to be copied.
to manage old data you can follow two approaches: