Hello
Need to migrate data from a standalone env to a small distributed env. Honestly I really only need one index.
I tried exporting to CSV and importing but the fields/columns don't line up as the did in the standalone env. So I thought Id tar the directory of the index I wanted and untar on the new host. I also thought about scp'ing it over. I suppose it doesn't really matter if the data is on both indexers as long as it's on one.
Thoughts?
A better way to do this?
Thanks for the ideas!
You can distribute your buckets from single old server to two new servers. See this
http://docs.splunk.com/Documentation/Splunk/7.0.2/Installation/MigrateaSplunkinstance#How_to_move_in...
You can distribute your buckets from single old server to two new servers. See this
http://docs.splunk.com/Documentation/Splunk/7.0.2/Installation/MigrateaSplunkinstance#How_to_move_in...
Ok thanks
Will do that