Getting Data In

Move bucket between 2 different Splunks

hketer
Path Finder

Hi Everyone!

I've tested the transferring buckets between 2 different Splunks, both of them are Win.
Transferred .bucketManifest file and hot_v1_0 folder from the old Splunk to the New.
After restart I still cant see the data.
I also tried to transfer the the db folder .

What am I missing?
Please assist.

Thank you!! :slightly_smiling_face:

Tags (1)
0 Karma

schose
Builder

Hi,

you can just copy one index to another host (as far as there are single-instances) - there are no issues with that. just make sure your settings for indexes.conf are the same and file permissions are set accordingly.

This also works for clustered enviorments with a little more efford.

Regards,

Andreas

0 Karma

hketer
Path Finder

Thank you for answering!
I did all of these and yet I cant search the data.

0 Karma

hketer
Path Finder

Splunk version - Win 7.3

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...