Monitoring Splunk

Splunk Cloud backup and recovery

Scottk1
Loves-to-Learn Lots

Client is asking about Splunk Cloud backup and recovery procedure for DR. Specifically all the configuration, searched, dashboards, fields, tag so on and so on. I can not find a document outlining Splunk cloud polices for high availability, backup and restore can anyone point to this info?  

 

Client ask - 

"Could you please check and let me know how and where following items are backed up and what is the process to recover them for DR purpose?

    • Audit logs
    • Usecases
    • Reports, alerts, lookup tables, KV etc
    • Config data
    • Source type config
    • Parsing
    • API, TI
    • Fields config
    • Data model, macros
    • Apps and app config
    • ES config
    • Threat intel config"
Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Splunk App for Anomaly Detection End of Life Announcement

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...