All Apps and Add-ons

process to move indexes

ankithreddy777
Contributor

what is the process to move indexes from one splunk deployment controlled by deployment server A to other splunk deployment controlled by deployment server B

0 Karma

Richfez
SplunkTrust
SplunkTrust

Indexes don't particularly care what DS they're created from. They just exist. Granted, they may have been created from the configurations provided by a particular DS, but that's just configurations.

What I'd suggest is to review your serverclass.conf and indexes.conf files in your deployment apps folders on the original DS and find all the serverclasses that deploy indexes to your indexers. Then copy the stanza(s) from the serverclasses and the indexes from indexes.conf to the new DS, then restart it and you should be good.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...