...ake a backup of files/indexeddata and configurations. We could not find any instructions on how to backup and restore the indexeddata. We are running on a Unix environment and have a large a...
...ave cost as it's running on AWS) and still get the latest data replicated into the shutdown indexer from the active indexer ?
So, in the event that the primary active indexer is down, I can bring up...
...ust want to ensure that all my log data that I have been collecting, settings, filters, and other core and customization of splunk apps are backed up. I do not need indexes, or stuff that can be r...
...irst, then restarting the indexer and finally starting the UFs again. Is there another way? I figure the data originating from log files monitored by UFs gets sent to the indexer, but the poor indexers d...
...wo options with regards to backing updata and disaster recovery.
Use c4.??xlarge instances with EBS backed storage or d2.??xlarge instances with HDD based local storage and index replication b...
Hello all,
following use case:
We wanted to create a backup of some json data. For this we created a new index called "xyz_backup" and moved all data from the original index to it. By d...
Hi all, Im under Splunk Version 9.0.2. After decomissionning one indexer in a multi site clustering, I cant retrieve my SF / RP. A Rolling restart and CM restart (splunkd) had no effect. G...
I've struggled on this issue for the past few days and I can see to resolve it.
I've checked and rechecked my config.
None of my data gets indexed when my application is copied (with os path m...
According to my Deployment monitor app one of my indexer shows backed up. I need help find out if it is some thing due to slow disk or some complex regex.
I am providing the following logs as e...
...osted in AWS (famous last words, I know). The section on backing upindexeddata in docs isn't conclusive either.
Any thoughts and experiences with this?