Splunk Enterprise

Lookups migration

nejmeddine
Loves-to-Learn

I installed a new splunk pprod platform and I would like to migrate all the prod data to the new platform.

I restored the searchhead prod cluster on the pprod cluster with the backup and restoration of .bundle as indicated in this link:

https://docs.splunk.com/Documentation/Splunk/8.2.12/DistSearch/BackuprestoreSHC

The problem I have is a difference in the number of lookups between the prod and the pprod (pprod contains 1240 lookups and 58 datamodels while the prod contains 1270 lookups and 59 datamodels). Why do I have this difference even though I restored the pprod cluster with the prod .bundle?
What can I do to have the same number on both platforms?

0 Karma
Get Updates on the Splunk Community!

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Automatic Discovery Part 2: Setup and Best Practices

In Part 1 of this series, we covered what Automatic Discovery is and why it’s critical for observability at ...