...ocs.splunk.com/Documentation/Splunk/4.3.2/Admin/Moveanindex
http://splunk-base.splunk.com/answers/49533/movin-an-index-to-new-server
So here's my situation. A new datacenter has been acquired at the c...
Hey Guys! I am very new to Splunk Enterprise and it's still in testing phase. I am trying to use this documentation https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/MoveAnIndex to move my database...
...es.conf: default index disabled - quit!
Validating database failed with code '1'.
We noticed that a few files where not copied over and can't copy them manually.The content of:
- C:\Program F...
I modified $SPLUNK_HOME/etc/system/local/indexes.conf for the specific index to keep only 10 warm databases; however, it is not working as I have over 160 warm databases in my local disk under the...
I would like to movethe entire indexdatabase from "/opt/splunk/var/lib/splunk" to "/opt/splunk/var/lib/splunkdb" which is a new mount point.
I followed the direction from the documentation e...
I was intending to moving my colddb and thaweddb indexes over and I mixed up the parent folder.
So I ended up moving the folder with all my hot db, while the splunk service was still running.
W...
We have a database server whose logs are pushed into Splunk. Those logs also contain userdata information like their login mail-id, phone numbers, personal mail-id for reference and such details....
...o:
1- Copy the Splunk folder of the old Indexer servers onto the new Indexer servers (without theDatabase folder)
2- On the Universal Forwarders, change (with the help of the Deployment server) the I...
...plunk\etc\splunk-launch.conf to the path:
SPLUNK_DB=D:\splunk\var\lib\splunk
I copied the contents of the original database path to the new path, then restarted the splunkd service, logged i...