Installation

Can I move a Splunk instance from Solaris 10 to Windows?

mctester
Communicator

We are looking at upgrading to 4.1.x of splunk, which I have the documentation for. However, I've also been asked to migrate over to Windows server, rather than the Solaris 10 splunk is currently sitting on. I have not found anything on Splunk's site or in documentation about this sort of migration.

Is there any documentation for this? Is there a preferred procedure? i.e. move to Windows first, then upgrade, or upgrade then move to Windows

We would like to keep all of the current indexes, if at all possible, as well as all current user configurations/preferences.

Tags (2)

gkanapathy
Splunk Employee
Splunk Employee

Please also look at some of the sections here:

http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install

0 Karma

Dan
Splunk Employee
Splunk Employee

The Splunk indexes should be portable, as long as the Endian-ness of the chipset is the same. I'm not sure whether that's the case with Solaris and Windows, but you can try it by spinning up a new instance on Windows and copying a (warm) bucket over. By default these buckets are in the directory $SPLUNK_HOME/var/lib/splunk/defaultdb/db/

gkanapathy
Splunk Employee
Splunk Employee

For Solaris on Intel, the indexes will be compatible. For Solaris SPARC, they will not be.

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...