- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Archive some of indexes in a separate disk.

ayush1906
Path Finder
12-15-2019
11:12 PM
I am currently migrating my splunk instance to a new environment.
The problem is we are having some old index, in which no new data is being added. I want to archive them in my backup so that I could limit my data to be copied to new instance.
Plus there might be the use of those indexed data in the future as need-on-basis.
Is there any path I should copy for my data
Also, which of the conf needs to be copied.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

gcusello

SplunkTrust
12-16-2019
12:06 AM
Hi @ayush1906,
to manage old data you can follow two approaches:
- if you want to have on line data but not usually used, you can move these old indexes in disks less performant (and less expensive): to do this follow the documentation at https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Moveanindex ;
- if you want to store data off line but you could re use them , you have to configure thawed data follow the documentation at https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Automatearchiving ; the restoring documentation is at https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Restorearchiveddata
Ciao.
Giuseppe
