I've configured a pair of Phantom servers to usewarmstandby. As per the documentation, I ran ibackup.pyc --setup after setting up warmstandby, then ibackup.pyc --backup and it works fine.
I...
...upport ssh key authentication for the Splunk Phantom warmstandby script (i.e. do not prompt for the password of the OS username that is running Phantom).
...et
with care and understanding of the characteristics of your data
I just need clarification: is this the maximum span between the earliest event in the warm bucket to the latest event in the hot b...
...umber of days. 4. Now instance A is backup and we configure warmstandby again with instance B as primary and instance A as standby to allow the updates done on instance B in the last few days to f...
Has anyone come up with a solid solution for backing up Splunk for disaster recovery purposes? I've read a lot about what files we need to pull, and we've made some decisions based on utility (e.g. d...
I need to start backing up my Splunk and was looking at backing up any new Warm buckets. I'm planning to do this by running an rsync script to take a backup of any new warm bucket created to a new p...
Do we have retention policy for the containers in Phantom? When there are huge number of containers in Phantom, it consumes lots of memory and the playbooks won't run.