We have a clustered environment.
3 Indexers , 1 search head, 1 cluster master , 4 heavy forwarders and 100+ universal forwarders
The Infrastructure team wants to change the Hard Drives on the existing Splunk Infrastructure.
How can we move the indexer data/information from one hard drive to another without any data loss.
Thanks.
Hi athorat,
take a look at the docs http://docs.splunk.com/Documentation/Splunk/6.3.0/Indexer/Moveanindex about moving an index to a different file system / disk. As well take a look at this answer http://answers.splunk.com/answers/149248/how-to-move-index-from-one-hard-drive-to-another-in-splunk-... which covers the cluster index move.
Hope this helps ...
cheers, MuS
Hi @MuS
We will not be changing the actual physical servers.
In this case when we get a new HDD can we not just replicate the content on the drive and use the new Drive?
Not sure if it makes sense...
Thanks.
Hi athorat,
sure, this can be done as well. Just make sure the $SPLUNK_DB
path matches the new disks and all is good.
cheers, MuS