Splunk Enterprise Security

Has any great person here written a Back up / DR for Splunk ES? Any guidance is much appreciated.

SamHTexas
Builder

I have Indexer clustering, SH clustering in a distributed environment. 

Labels (1)
0 Karma

lkutch_splunk
Splunk Employee
Splunk Employee

For the ES portion of things, also consider this:
https://docs.splunk.com/Documentation/ES/6.6.0/Install/InstallEnterpriseSecuritySHC#Back_up_and_rest... 

Let me know if that helps. 

0 Karma

codebuilder
Influencer

This is a complex topic and you should really engage Splunk support for guidance on how to implement these strategies.

With that said, one option for DR is to implement multi-site clustering.

https://docs.splunk.com/Documentation/Splunk/8.2.1/Indexer/Multisitearchitecture

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...