What's best way to restore a Solaris Spark 4.0.7 archive to a X86 Linux 32 or 64bit Splunk 4.0.7 install?

New Member

I have archives on my Splunk Spark Solaris 4.0.7 installation that I would like to be restored on a new Splunk X86 Linux 32bit and 64bit Splunk 4.0.7 install. What's the best way to get this archive data migrated and searchable on the new Linux Splunk installation?

I have been successful in getting the Splunk Spark Solaris 4.0.7 archive loaded and searchable on a new Splunk Spark Solaris install; however using the same method with a X86 Linux Splunk install was not successful because the searches would hang indefinitely.

0 Karma

Splunk Employee
Splunk Employee

I'm assuming that your archive is a Solaris SPARC, not Solaris x86. In that case, it's not really possible to move the data over directly, since the SPARC and x86 processors have different endian-ness, and so the Splunk indexes are not compatible. (Sparc would compatible with, for example AIX POWER architecture indexes, and Solaris x86 and Linux x86 and Windows would be compatible.) The only way to handle with will be to export the data from the SPARC system using the Splunk command line export or exporttool, and then import it into the x86 system.

Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...