We have an SHC cluster on enterprise Version 7.3.5 & ITSI 4.4. Recently we trigged to upgrade our ITSI from 4.4.X to 4.7.0 and it failed.
It was an generic error message and support was not a...
Hi, We have a requirement to migrate ITSI Content packs to Splunk Cloud. Is it possible to achieve this? If yes, Could you please help with the list of steps to perform for this? I would a...
splunk 6.1 error and cannot search : Error in 'litsearch' command: Your Splunk license expired or you have exceeded your license limit too many times. Renew your Splunk license b...
What is the correct method to backup/restoreSplunk Enterprise?
I believe I can backup (Linux) using this command:
tar czvf /opt/$HOSTNAME.tgz /opt/splunk/etc/
...nly option is to upgrade to Splunk 9.0 which has only been out for a few days. If you take this course of action, I'd highly recommend that you take afullbackup of your SPLUNK_HOME directory - often /o...
...everal GBs. So, I am looking for ways to trim down the backup copy while still retaining all I need for a 'fullrestore' of a server if every needed.
I notice that the ~/var/run/searchpeers has a lot o...
We have 10 indexers in our environment of 3TB each along with Forwarder and search heads.
We do backup each of these but the restore size is too high.~ 30TB.
Any suggestions on improving on t...
...o, I thought about
making afullbackup of /etc and /var (or even everything)
uninstall splunk
install clean version
make tests
remove and re-install
copy over the restore
My q...
I am trying to take abackup in itsi-stg(I) and restore in team-stg(T).
The user has fulladmin rights including itoa_admin. And meta files has write privilege over collections/i...