...ake a backup of files/indexeddata and configurations. We could not find any instructions on how to backup and restore the indexeddata. We are running on a Unix environment and have a large a...
...ave cost as it's running on AWS) and still get the latest data replicated into the shutdown indexer from the active indexer ?
So, in the event that the primary active indexer is down, I can bring up...
...ust want to ensure that all my log data that I have been collecting, settings, filters, and other core and customization of splunk apps are backed up. I do not need indexes, or stuff that can be r...
...irst, then restarting the indexer and finally starting the UFs again. Is there another way? I figure the data originating from log files monitored by UFs gets sent to the indexer, but the poor indexers d...
...wo options with regards to backing updata and disaster recovery.
Use c4.??xlarge instances with EBS backed storage or d2.??xlarge instances with HDD based local storage and index replication b...
Hello all,
following use case:
We wanted to create a backup of some json data. For this we created a new index called "xyz_backup" and moved all data from the original index to it. By d...
Hi all, Im under Splunk Version 9.0.2. After decomissionning one indexer in a multi site clustering, I cant retrieve my SF / RP. A Rolling restart and CM restart (splunkd) had no effect. G...
I've struggled on this issue for the past few days and I can see to resolve it.
I've checked and rechecked my config.
None of my data gets indexed when my application is copied (with os path m...
According to my Deployment monitor app one of my indexer shows backed up. I need help find out if it is some thing due to slow disk or some complex regex.
I am providing the following logs as e...
Hi all, I just want to ask if it makes sense to backup the indexeddata before the upgrade of peer nodes (indexer nodes) or is it enough to backup only the home directoy of splunk.&n...