Splunk Search

How to rename an index in Splunk 6?


How do I do this? The index I'm renaming is brand new so there are no reports/searches or anything relying on it yet but it does have some log data in it.


Tags (3)

Splunk Employee
Splunk Employee

You can't rename it directly (for example, through the Settings menu). You would have to move it in place, if that makes sense, following the instructions in Move the index database in the documentation.


The method should not have changed between version 6 and version 4:


Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...