Would u share a couple of SPLs that would backup the complete list of conf files in Splunk Ent. & ES? Thx a million

[SamHTexas]

I need your help to backup the entire set of the .conf files in Splunk Ent. & ES separately please. Can this backup be scheduled? Is scheduled back up here recommended? Thanks a million in advance.

[ro_mc]

If you're looking for more of a version control solution, look at the Configuration Monitoring TA for Splunk:

https://splunkbase.splunk.com/app/4364/

This one's a bit older (2019, designed for Splunk 7.2), but provides historical versions of conf files, changes made to configuration files, and guidance on potential issues in configuration files.

[richgalloway]

There's an app for that, although it doesn't distinguish Enterprise from ES.  See https://splunkbase.splunk.com/app/5600/

Or you can use your favorite backup tool to copy all .conf files in $SPLUNK_HOME/etc to an alternate store.

[SamHTexas]

Thank u sir for your message. Our Splunk Enterprise & ES are located on different servers. Does this app need to be installed on each server for this backup job? Thank u

[richgalloway · Accepted solution]

The details page on splunkbase says to install on the MC host only.