Getting Data In

Move bucket between 2 different Splunks

hketer
Path Finder

Hi Everyone!

I've tested the transferring buckets between 2 different Splunks, both of them are Win.
Transferred .bucketManifest file and hot_v1_0 folder from the old Splunk to the New.
After restart I still cant see the data.
I also tried to transfer the the db folder .

What am I missing?
Please assist.

Thank you!! 🙂

Tags (1)
0 Karma

schose
Builder

Hi,

you can just copy one index to another host (as far as there are single-instances) - there are no issues with that. just make sure your settings for indexes.conf are the same and file permissions are set accordingly.

This also works for clustered enviorments with a little more efford.

Regards,

Andreas

0 Karma

hketer
Path Finder

Thank you for answering!
I did all of these and yet I cant search the data.

0 Karma

hketer
Path Finder

Splunk version - Win 7.3

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...