Hello,
I want to move specific data from one index to another index. I don't want to make a full copy of previous index i just need to copy some of sourcetypes to another index. Then i need to delete copied data in old index.
Could someone please provide the best approach to do this?
I've read about collect command after search query but i believe it didn't actually copy your data on hard drive.
And i i've read about splunk cmd exporttool but not so much. Could someone please clarify on this point? Version of splunk is 6.0.1
... View more