Splunk Dev

how to copy data from one indexer to another indexer?

Kratika
New Member

Hi,

We are going to install a new indexer on same host where our old indexer is running as our splunk license is going to expire. Can you please let me know how we can copy the whole data(configuration and all other data) from old indexer to the new indexer.

Thanks & Regards,
Kratika

Tags (2)
0 Karma

mship
Path Finder

If you are on windows and use xcopy. I will simplify for sake of space

xcopy "C:<path to indexes>" "\\C:<path to index>" (options ex: /e /c /s ...)

0 Karma

RicoSuave
Builder

http://www.splunk.com/base/Documentation/latest/Admin/Whatyoucanbackup

You'll find all the info you need here.

Maybe i'm misunderstanding, but why not just upgrade the license?

0 Karma

Drainy
Champion

Hi,

One of my early questions was similar to this. I had one indexer running and a few days later installed a new one remotely. When I set it to forward it only forwarded everything from that point.
Here is my question

The answer I got was that I needed to physically copy/paste the buckets over from one to the other, I would assume the same case for the configuration files

Here is the link on migrating indexes
http://www.splunk.com/wiki/Community:MoveIndexes

Hope this helps

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...