Installation

Can I move a Splunk instance from Solaris 10 to Windows?

mctester
Communicator

We are looking at upgrading to 4.1.x of splunk, which I have the documentation for. However, I've also been asked to migrate over to Windows server, rather than the Solaris 10 splunk is currently sitting on. I have not found anything on Splunk's site or in documentation about this sort of migration.

Is there any documentation for this? Is there a preferred procedure? i.e. move to Windows first, then upgrade, or upgrade then move to Windows

We would like to keep all of the current indexes, if at all possible, as well as all current user configurations/preferences.

Tags (2)

gkanapathy
Splunk Employee
Splunk Employee

Please also look at some of the sections here:

http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install

0 Karma

Dan
Splunk Employee
Splunk Employee

The Splunk indexes should be portable, as long as the Endian-ness of the chipset is the same. I'm not sure whether that's the case with Solaris and Windows, but you can try it by spinning up a new instance on Windows and copying a (warm) bucket over. By default these buckets are in the directory $SPLUNK_HOME/var/lib/splunk/defaultdb/db/

gkanapathy
Splunk Employee
Splunk Employee

For Solaris on Intel, the indexes will be compatible. For Solaris SPARC, they will not be.

Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...