I need to migrate my current ES installation from a VM to a physical host, due to performance issues in the virtual instance.
Because of internal policies, I cannot simply clone the system via rsync, as the new physical box must have a new name to indicate it isn't a VM.
I tried copying the /opt/splunk/etc/system subdirectory of the new server to a backup location, then using rsync to replicate the /opt/splunk/etc subdirectory structure from the functional VM to the new server. I copied the backup of system back into place, except for the server.conf which I merged the two together.
Tons of errors. Tons of missing data in the ES dashboards.
What am I missing?
Thanks in advance for any suggestions.
