Installation

Can I move a Splunk instance from Solaris 10 to Windows?

mctester
Communicator

We are looking at upgrading to 4.1.x of splunk, which I have the documentation for. However, I've also been asked to migrate over to Windows server, rather than the Solaris 10 splunk is currently sitting on. I have not found anything on Splunk's site or in documentation about this sort of migration.

Is there any documentation for this? Is there a preferred procedure? i.e. move to Windows first, then upgrade, or upgrade then move to Windows

We would like to keep all of the current indexes, if at all possible, as well as all current user configurations/preferences.

Tags (2)

gkanapathy
Splunk Employee
Splunk Employee

Please also look at some of the sections here:

http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install

0 Karma

Dan
Splunk Employee
Splunk Employee

The Splunk indexes should be portable, as long as the Endian-ness of the chipset is the same. I'm not sure whether that's the case with Solaris and Windows, but you can try it by spinning up a new instance on Windows and copying a (warm) bucket over. By default these buckets are in the directory $SPLUNK_HOME/var/lib/splunk/defaultdb/db/

gkanapathy
Splunk Employee
Splunk Employee

For Solaris on Intel, the indexes will be compatible. For Solaris SPARC, they will not be.

Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...