Can I move a Splunk instance from Solaris 10 to Windows?

[mctester]

We are looking at upgrading to 4.1.x of splunk, which I have the documentation for. However, I've also been asked to migrate over to Windows server, rather than the Solaris 10 splunk is currently sitting on. I have not found anything on Splunk's site or in documentation about this sort of migration.

Is there any documentation for this? Is there a preferred procedure? i.e. move to Windows first, then upgrade, or upgrade then move to Windows

We would like to keep all of the current indexes, if at all possible, as well as all current user configurations/preferences.

[gkanapathy]

Please also look at some of the sections here:

http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install

[Dan]

The Splunk indexes should be portable, as long as the Endian-ness of the chipset is the same. I'm not sure whether that's the case with Solaris and Windows, but you can try it by spinning up a new instance on Windows and copying a (warm) bucket over. By default these buckets are in the directory $SPLUNK_HOME/var/lib/splunk/defaultdb/db/

[gkanapathy]

For Solaris on Intel, the indexes will be compatible. For Solaris SPARC, they will not be.