Splunk Enterprise

Would u share a couple of SPLs that would backup the complete list of conf files in Splunk Ent. & ES? Thx a million

SamHTexas
Builder

I need your help to backup the entire set of the .conf files in Splunk Ent. & ES separately please. Can this backup be scheduled? Is scheduled back up here recommended? Thanks a million in advance.

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The details page on splunkbase says to install on the MC host only.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

ro_mc
Path Finder

If you're looking for more of a version control solution, look at the Configuration Monitoring TA for Splunk:

https://splunkbase.splunk.com/app/4364/

This one's a bit older (2019, designed for Splunk 7.2), but provides historical versions of conf files, changes made to configuration files, and guidance on potential issues in configuration files.

richgalloway
SplunkTrust
SplunkTrust

There's an app for that, although it doesn't distinguish Enterprise from ES.  See https://splunkbase.splunk.com/app/5600/

Or you can use your favorite backup tool to copy all .conf files in $SPLUNK_HOME/etc to an alternate store.

---
If this reply helps you, an upvote would be appreciated.

SamHTexas
Builder

Thank u sir for your message. Our Splunk Enterprise & ES are located on different servers. Does this app need to be installed on each server for this backup job? Thank u

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The details page on splunkbase says to install on the MC host only.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>