Knowledge Management

KVStore Backup for Search Head

santosh_hb
Explorer

Hi All, I am currently performing upgrade of my entire Splunk cluster environment.
While performing the Search Head upgrade, do I really need to take KVStore backup?
My understanding is: All the data including kvstore data will be stored on Indexers and while doing the upgrade of Indexers we can take the backup of KVStore.
If in case, KVStore backup is required on Search Head, what is the purpose of it as I understand that Search Head doesn't have any important KVStore data that needs to be backedup.

I see that there are multiple apps within the Search Head that are running and few apps might use these KVStore data. But, isn't the actual storage of KVStore data happens on Indexers?

Tags (1)
0 Karma

starcher
Influencer

https://docs.splunk.com/Documentation/Splunk/7.2.5/Admin/BackupKVstore

No KVStore resides on search heads not indexers. See the docs link above for kvstore backup instructions.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...