Dashboards & Visualizations

Migrate splunk database and dashboard to new splunk instance in windows servers

medvelsplunk
Engager

Hi

I have free splunk instance in my lap top and I wan to migrate the database, index, dashboard, etc to one server with splunk enterprise

Regards

Tags (1)
0 Karma

nickhills
Ultra Champion

Splunk configuration (and buckets) are relatively portable.

Personally, I would:
1.) install a fresh copy of the the SAME version of splunk on your target server.
2.) Run through FTR, set passwords, ports etc.
3.) STOP Splunk on your new server
4.) STOP splunk on your laptop
5.) Copy the contents of $SPLUNK_HOME/etc/apps to your new server
6.) Copy the contents of $SPLUNK_HOME/var/lib/splunk to your new server
7.) REVIEW any changes you have made to the system settings (found in $SPLUNK_HOME/etc/system/local/*.conf) and CONSIDER coping them too.
8.) Start Splunk on the server and check all your data/config/apps and dashboards are as you expect.

If my comment helps, please give it a thumbs up!

woodcock
Esteemed Legend

You should also copy splunk.secret from the old server BEFORE you start the new server's splunk the first time.

0 Karma

rwsisson
Explorer

You may want to also make sure you copy $SPLUNKHOME/etc/users -- this will bring in dashboards and settings that are defined with user scope.

Regarding indexes - you may not want to bring the splunk internal indexes - and only the ones with your onboarded data (assuming you don't want the internal indexes)

medvelsplunk
Engager

Hi, the splunk services don´t running

0 Karma

nickhills
Ultra Champion

Can you paste the last 30 lines from Splunkd.log

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...