Installation

Splunk Enterprise - Migrating from Ubuntu to Centos

snort80
Explorer

Hi,

I am looking to move my Splunk EN 7.1.3 installation from Ubuntu to Centos distro.
Referencing Splunk doc on the topic, the suggestion is to:
1. copy the contents of the original splunk $splunk_home (I am assuming default is /opt/splunk) to the new machine
2. install the same version of splunk.
3. confirm indexes.conf contains correct location and path specification for any non-default indexes.

A couple of q's please:
-Do I need to worry about bucket ID conflicts in the above?
-What is the location of the 'indexes.conf' files that I need to check? Is it the '$SPLUNK_HOME/etc/system/local' or '$SPLUNK_HOME/etc/apps/XXX/local', or both?
-Do I need to re-install any of the apps on the new instance, or do apps get copied over in step (1) above?
-Any other caveat I should be aware of? I.e. server cert, license etc?

Thank you very much,

Labels (1)
0 Karma

dkeck
Influencer

please accept the answer if it was helpful 🙂

0 Karma

dkeck
Influencer
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!