Deployment Architecture

movin an index to new server

gudavasr
Path Finder

Hi,

I am moving entire index from one server to another server. I am using deployment server to deploy the index and/of forwarder.
So, I deployed forwarder and searchhead on new box.
This is what I am planning:

1) stop splunk on old indstance (both forwarder and search head process)
2) copy entire index folders to new server
3) start splunk on new server.

Should I need to start splunk procesees before moving indexes or after moving indexes after initial installation? Because I think starting splunk on new server after initial installation will create some default directoris. And I think if I copy indexes prior to restart..it may overwrite and will have issues.
Also, how to make sure permissions set are correct when moving from one server to another?

Thank You.

0 Karma
1 Solution

Paolo_Prigione
Builder

You can copy the index files before starting splunk.
If you are on a linux box, archive/unarchive with tar and it will retain the proper permissions.
In case the userid(uid) or groupid (gid) on the new box are different, run

chown -R splunkuser:splunkgroup $SPLUNK_HOME/var/lib/splunk

View solution in original post

0 Karma

Paolo_Prigione
Builder

You can copy the index files before starting splunk.
If you are on a linux box, archive/unarchive with tar and it will retain the proper permissions.
In case the userid(uid) or groupid (gid) on the new box are different, run

chown -R splunkuser:splunkgroup $SPLUNK_HOME/var/lib/splunk
0 Karma

gudavasr
Path Finder

ok..thanks that worked.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...