Splunk Dev

Splunk Migration to other instance

rangineniarunku
Explorer

I need to backup all the splunk data/dashboards/input/etc ..before I migrate to a new instance with the same version. Can you help me by providing the list of folders which I need to backup to restore my whole old data.

0 Karma

coltwanger
Contributor
0 Karma

rangineniarunku
Explorer

Have gone through the doc but it was not clear about the index Back up procedure. I tried the following way!

  1. Stopped Splunk on both machines
  2. Created the new indexes in new splunk machines and copied the warm buckets into it the to the index location
  3. restarted the Splunk on new machine.

But still I cannot see any data flowing in new machine. Is there anything I missed?

0 Karma

bheemireddi
Communicator

rangineniarunkumar,

Are you troubleshooting the migrated data to the new instance? or the new data flowing into the new instance?
I would go through the instance and see what settings the old instance is running.
splunkdata
system/local
etc/apps
etc/deployment-apps (if it is all one single system does everything?)

If this instance configurations managed from a deployment-server, then you can point the new instance to deployment-server and that will take care of some of the configurations.

If this also a search head, then check all your dashboards etc. to see if any hard coded urls with your old hostname etc.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...