Splunk Search

How to rename an index in Splunk 6?


How do I do this? The index I'm renaming is brand new so there are no reports/searches or anything relying on it yet but it does have some log data in it.


Tags (3)

Splunk Employee
Splunk Employee

You can't rename it directly (for example, through the Settings menu). You would have to move it in place, if that makes sense, following the instructions in Move the index database in the documentation.


The method should not have changed between version 6 and version 4:


Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...