Splunk Enterprise 7.0.1 Indexes Migration to 7.1.4

[mjlsnombrado]

Hi All,

I'm about to migrate indexes under /opt/splunk/var/lib/splunk and I am about to tar the each index folder, do I need to include the .dat file on the index.tar.gz file?

[inventsekar]

I am about to tar the each index folder
may we know, are you doing this for taking backup of the current setup?

[mjlsnombrado]

Hi @inventsekar , Yes I'm doing it for backup and also as preparation for migration to reduce the size of each folder and to transfer it faster, as I am about to untar it on /opt/splunk/var/lib/splunk of the new instance I know I need to be careful on tarring and untarring to avoid duplicating bucket ids, what I'm asking is, what is the significance of the .dat file and is it really that important and do I need to include it in the tar file to be created? TIA

[p_gurav]

Hi

• Following links can be help:
  https://wiki.splunk.com/Community:MoveIndexes
  https://docs.splunk.com/Documentation/Splunk/7.2.1/Installation/MigrateaSplunkinstance#How_to_move_i...

  • .dat file contain the next bucket ID to be created for that index, so its better to tar whole index folder and move it to another instance.