Splunk Dev

how to copy data from one indexer to another indexer?

Kratika
New Member

Hi,

We are going to install a new indexer on same host where our old indexer is running as our splunk license is going to expire. Can you please let me know how we can copy the whole data(configuration and all other data) from old indexer to the new indexer.

Thanks & Regards,
Kratika

Tags (2)
0 Karma

mship
Path Finder

If you are on windows and use xcopy. I will simplify for sake of space

xcopy "C:<path to indexes>" "\\C:<path to index>" (options ex: /e /c /s ...)

0 Karma

RicoSuave
Builder

http://www.splunk.com/base/Documentation/latest/Admin/Whatyoucanbackup

You'll find all the info you need here.

Maybe i'm misunderstanding, but why not just upgrade the license?

0 Karma

Drainy
Champion

Hi,

One of my early questions was similar to this. I had one indexer running and a few days later installed a new one remotely. When I set it to forward it only forwarded everything from that point.
Here is my question

The answer I got was that I needed to physically copy/paste the buckets over from one to the other, I would assume the same case for the configuration files

Here is the link on migrating indexes
http://www.splunk.com/wiki/Community:MoveIndexes

Hope this helps

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...