How do you restore the local.meta if it has been corrupted

[nls7010]

The local.meta file on our splunk 5.0.4 version on the Search Head/Deployer server has had data removed (assuming accidentally), how do I restore the file with the data it contained previously? When I tried to restart Splunk it failed. Will probably have to put in a ticket as this is our production system.

[somesoni2]

Where was the local.meta file, search heads or on deployment servers (there was no SHC with version 5.0.4, available Splunk 6.2+)? Do you take daily backup of the servers? Did it get remove from all servers or just one?

[nls7010]

No we don't do a daily backup. However, I have asked to have the file restored as we're supposed to have backups completed. So far, I have not gotten the backup if there is one. I'm also not certain when this error occurred as the product was working until I was about to do a splunk reload deploy-server to add additional servers to an existing app.

[xpac]

Hey,
you can just restore the file from your backup. 😉
Seriously, backing up or putting your stuff into version control can save you a lot of headaches in the future...