Knowledge Management

KVStore Backup for Search Head

santosh_hb
Explorer

Hi All, I am currently performing upgrade of my entire Splunk cluster environment.
While performing the Search Head upgrade, do I really need to take KVStore backup?
My understanding is: All the data including kvstore data will be stored on Indexers and while doing the upgrade of Indexers we can take the backup of KVStore.
If in case, KVStore backup is required on Search Head, what is the purpose of it as I understand that Search Head doesn't have any important KVStore data that needs to be backedup.

I see that there are multiple apps within the Search Head that are running and few apps might use these KVStore data. But, isn't the actual storage of KVStore data happens on Indexers?

Tags (1)
0 Karma

starcher
Influencer

https://docs.splunk.com/Documentation/Splunk/7.2.5/Admin/BackupKVstore

No KVStore resides on search heads not indexers. See the docs link above for kvstore backup instructions.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...