How to take kvstore backup for security Search Head?

[mallempatisreed]

hi All,

When am trying to take kvstore backup in Security Search Head as part of upgrade process am getting below error.
./splunk backup kvstore

[appuser@XYZSPKTEST01 bin]$ ./splunk backup kvstore

Command error: 'backup' is not a valid command. Please run 'splunk help' to see the valid commands.

For taking KVSTORE backup for ITSI we are using below command.

/app/splunk/bin/splunk cmd python /app/splunk/etc/apps/SA-ITOA/bin/kvstore_to_json.py -s 8089 -u admin -p changeme -m 1 -f kvstore_bkp_5_11 -n  -b "2.6.1"

Can someone help me how to take backup for Enterprise Security App.

Thanks,
Sree

[jkat54]

Go here, and select the version of splunk that you have:

https://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/BackupKVstore

Then follow the directions.