Splunk Dev

how to copy data from one indexer to another indexer?

Kratika
New Member

Hi,

We are going to install a new indexer on same host where our old indexer is running as our splunk license is going to expire. Can you please let me know how we can copy the whole data(configuration and all other data) from old indexer to the new indexer.

Thanks & Regards,
Kratika

Tags (2)
0 Karma

mship
Path Finder

If you are on windows and use xcopy. I will simplify for sake of space

xcopy "C:<path to indexes>" "\\C:<path to index>" (options ex: /e /c /s ...)

0 Karma

RicoSuave
Builder

http://www.splunk.com/base/Documentation/latest/Admin/Whatyoucanbackup

You'll find all the info you need here.

Maybe i'm misunderstanding, but why not just upgrade the license?

0 Karma

Drainy
Champion

Hi,

One of my early questions was similar to this. I had one indexer running and a few days later installed a new one remotely. When I set it to forward it only forwarded everything from that point.
Here is my question

The answer I got was that I needed to physically copy/paste the buckets over from one to the other, I would assume the same case for the configuration files

Here is the link on migrating indexes
http://www.splunk.com/wiki/Community:MoveIndexes

Hope this helps

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...