Splunk Search

Migration Issue

New Member

We are about to migrate stuff from one cloud env to AWS.. set up is done.. issue is :

  • we have old splunk instance where indexer and search head was on same server.
  • Now, we have segregated the search head and indexer.
  • I want to migrate all the dashboards, alerts, reports to new instance..
  • main issue is :
  • I cannot copy as it is by following migration as stated in splunk because previously we have splunk search head and indexer on same server. Now, we have two instances simply copy and paste will not work
  • Secondly, on old splunk instance we have user on splunk, now we have configured SAML. I don't know If simply copy and paste of the user will work

Kindly sugest

Tags (1)
0 Karma


Please accept the answer if it helped. Thank you 🙂

0 Karma


If the dashboards (views), alerts and reports were in any specific app, you can take the files or the app [ e.g. savedsearches.conf, props.conf] and move them to new instance and it should work.

You just need to ensure the required indexers and other indexer specific settings/requirements are added in the indexer.

0 Karma
Get Updates on the Splunk Community!

Streamline Data Ingestion With Deployment Server Essentials

REGISTER NOW!Every day the list of sources Admins are responsible for gets bigger and bigger, often making the ...

Remediate Threats Faster and Simplify Investigations With Splunk Enterprise Security ...

REGISTER NOW!Join us for a Tech Talk around our latest release of Splunk Enterprise Security 7.2! We’ll walk ...

Introduction to Splunk AI

WATCH NOWHow are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. ...