Splunk Dev

Migrating readable archived index data to new instance

mwdbhyat
Builder

Hi,

Im looking to migrate readable archived data from a singlesite-multisite cluster to a standalone instance for a POC. The archive data is still readable using hadoop data roll and is stored on hdfs as a standard splunk rawdata db.tgz.

-What would be the best process to do this?
-Is it as simple as copy over the folder and realign the new conf files to the new standalone instance?

The point being that ultimately we will migrate from cluster to cluster with TB of readable archived data(want to test on small scale first).

Any thoughts on this process?

Thanks

Tags (1)
0 Karma
1 Solution

vishaltaneja070
Motivator

Hello @mwbdhyat,

it is the same as we migrate indexes.
Below answer can help you out better:

https://answers.splunk.com/answers/32176/is-it-possible-to-migrate-indexed-buckets-to-a-different-in...

View solution in original post

0 Karma

vishaltaneja070
Motivator

Hello @mwbdhyat,

it is the same as we migrate indexes.
Below answer can help you out better:

https://answers.splunk.com/answers/32176/is-it-possible-to-migrate-indexed-buckets-to-a-different-in...
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...

The Data Connection - October 2026

We all have data. Lots of it. But that’s not the problem – it’s understanding what we should we do with it, ...

Beyond the Acceleration Zone: Maximizing Your Success with Splunk Customer Experience ...

Customer success is built on tailored guidance and accessible resources. As a Splunk user, you are encouraged ...