How do I move data from one index to another?

[patricianaguit]

Is it possible to archive/move/transfer data from one index to another?

The scenario is that the old index is almost full, and the old data need to be moved from the new index.
Once the old data are moved, the old data must be deleted from the old index, and must only appear in the new index.

Are there possible ways to do it? Would appreciate your suggestions!

[jfuller19]

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Collect

[adonio · Accepted solution]

yes it is very much possible and many answers to that challenge are right here at answers.slpunk.com
here are some answers:
https://answers.splunk.com/answers/294691/how-to-move-indexed-data-from-one-index-to-other-i-1.html
https://answers.splunk.com/answers/610941/migrate-from-one-index-to-another-index-with-data.html
https://answers.splunk.com/answers/563854/copy-indexed-data-from-one-index-to-another-index.html
https://answers.splunk.com/answers/400563/best-approach-to-move-data-to-a-different-index.html
https://answers.splunk.com/answers/126422/move-specific-data-from-one-index-to-another-index.html

hope it helps

[patricianaguit]

Thank you! This helps 🙂