What is the best way to go about Splunk Server Migration?

[leal]

Hello Members,

Here at the company, we are going to carry out the total migration of Splunk Enterprise, which is currently in AWS Argentina, to AWS Norte Virginia. I would like to ask for some help here, which are the best practices to follow for this type of migration and/or which server do we start transferring data through, heavy forwarder, indexer, search head, deployment server? Would there be any difference depending on the order?

We have a large environment. As a side note, let's take a SnapShot of the environment before starting the migration.

We are studying to use CloudEndure for this job, would it be the best option?

[leal]

Wouldn't this documentation be more focused on Splunk for Cloud? Because our environment is on-premise

[richgalloway]

Yes, as I said, it is focused on Splunk Cloud, but can be adapted to your purposes.

[richgalloway]

Migrating Splunk between customer-managed cloud regions is similar to migrating to a new on-prem datacenter.

Splunk offers a checklist of milestones for migrating to Splunk Cloud at https://lantern.splunk.com/Splunk_Platform/Splunk_Cloud_Platform_Migration/Migrate.  You could adapt it to your scenario.