Splunk Enterprise

How to export saved searches, reports and dashboard from Splunk Enterprise installed on Windows platform?

berzerk
Engager
 
Tags (1)
0 Karma

berzerk
Engager

Correct!

I need to export these saved searches, dashboards and reports to another instance of Splunk. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Use zip or your favorite backup program to bundle-up %SPLUNK_HOME%\etc\apps\<app name> then copy the bundle to the other Splunk instance and un-bundle it.  "<app name>" refers to any app you installed on Splunk.  Do not copy built-in apps unless the two Splunk versions are identical.  You'll also want to copy %SPLUNK_HOME%\etc\apps\search\local\*.

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please tell us more about what you wish to accomplish.  Export in what form?

Since Splunk is installed on Windows, I'll presume it's an on-prem installation.  That means the saved searches, report, and dashboards are all available in the file system.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

How I Instrumented a Rust Application Without Knowing Rust

As a technical writer, I often have to edit or create code snippets for Splunk's distributions of ...

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...