About giulioBalza

giulioBalza · ‎05-17-2022

Hi Rickgalloway, thanks for the reply, sure changing OS and major version at the same moment is not an easy step. For this reason we install a separate environment with new OS and latest Splunk version identical to the old one. What is not clear is: - how to copy/move buckets from old to new (guid changes, reduce downtime) - kvstore migration thanks

giulioBalza · ‎05-17-2022

Hello, we have a cluster environment: - Search Head Cluster (3 nodes) - Indexers Cluster (4 sites) 10 nodes each actually is still with version 7.3.9 based on CentOS. We have to migrate the OS to Suse linux and at the same time upgrade to Splunk 8.2.6 , we want to prepare a parallel environment with the same number of nodes where to install the latest Splunk version. We also would like to use this new environment to migrate and fix the apps to be compatible with python, xml and jquery then start the env in production. We are struggling to find a way to migrate the indexes buckets (db_* and rb_*) and kvstore from old to new environment with less downtime and loss data, if it is possible what about the the GUID in buckets name. Thank you.

giulioBalza · ‎10-15-2020

Hello to everyone, i'm trying to figure out how to discard metrics before they are indexed. Unfortunately the source of the data cannot be configured to choose the right metrics, so We receive tons of unwanted metrics every 10 seconds. For the events it is possible via props.conf and transforms.conf but I'm not able to find a way for the metrics. I also checked the metric rollup policy however seems that acts on the indexed data (if I understood). Anyone has faced this issue before ? thanks, G.

Posts	3
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎10-15-2020

Online Status	Offline
Date Last Visited	‎05-23-2022 03:06 AM

How to migrate and update clustered environment?

Discard metrics

Re: How to Migrate and update clustered environmen...

How to migrate and update clustered environment?

Discard metrics