Splunk Enterprise

Converting Splunk Instance from Windows to Linux

Jarohnimo
Builder

Hello All,

I'm attempting to convert a splunk instance from windows to Linux but am having a hard time understanding the process fully.

These are the steps
https://docs.splunk.com/Documentation/Splunk/latest/Installation/MigrateaSplunkinstance

Windows has splunk 7.2.5 with ITSI installed. I've used 7zip to tar the splunk home dir to a file called splunk.tar.gz

Am I supposed to have splunk installed on Linux at 7.2.5? The same way you would for any instillation and then copy over the splunk.tar.gz from the windows server... Then extract it's content over the Linux out of the box 7.2.5 Linux instance?

Or am I supposed to copy extract the windows splunk.tar.gz file to opt/splunk location and then Install splunk 7.2.5?

Trying to extract the splunk.tar.gz file in Linux works to put the bits in the /opt/splunk location so at first glance everything looks fine...but if you go to try and run "splunk start" from the bin directory it tells you "splunk start" isn't a know command.

So somewhere down the line I'm getting this fairly easy process confused. Can someone please spin me in the right direction, what am I doing wrong? What's out of sequence?

 

 

Edit: sooo I see I missed step 3, that details installing splunk on the Linux node.

 

What's really confusing here is it doesn't tell you that you have to grab pieces of the windows install to copy over top of the Linux dirs.. 

My assumption was you copy the entire windows home directory overtop or to /opt/splunk in Linux... And that's doesn't appear to be the case. The instructions are not clear here and that's where there's confusion

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...