Hi,
I have a datacenter shutting down, but I need to keep some index data that is on one of the servers. If I rsync the files to another brand-new server, and start-up splunk, will this be seen as new data and count against my license? I'm using rsync to move the data. Nothing new has been written to it in over a month, but the customer decided at the last minute that they want to keep some of it.
Migrating data from one Splunk instance to another is well documented and should not count against your license.
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Installation/MigrateaSplunkinstance
Migrating data from one Splunk instance to another is well documented and should not count against your license.
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Installation/MigrateaSplunkinstance