Installation

How to migrate entire Indexer cluster from one set of VMs to another set of VMs?

saurabh0912
Path Finder
 
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Install Splunk on the new VMs and add them to the existing indexer cluster.

Put the old indexers into manual detention

splunk edit cluster-config -auth <username>:<password> -manual_detention on

For each indexer on the old VMs:

  • Down the indexer using the splunk off-line --enforce-counts command
  • Wait for the cluster to balance the buckets.  The indexer will stop itself.

Install a new Cluster Manager on the new VMs.  Point the new indexers to the new CM.

splunk edit cluster-config -mode peer -master_uri https://<CM URI>:8089 -replication_port 9887 -secret your_key

splunk restart

Shut down the old CM.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...