I am in the process to migrate our Splunk installation to a new server. I found how to move the Splunk index... a big part of the job!
Now I would like to know how I can move the configuration from our old server to the new one. Or maybe the configuration is part of the index?
Thanks,
Bernard
Hello Bernard,
Your indexes are held in the location specified in your SPLUNK_HOME/etc/splunk-launch.conf. By default, if you aren't using any custom indexes, the location is under /opt/splunk/var/lib/splunk/. The configuration can be retained by copying $SPLUNK_HOME/etc/.
More on this topic can be found here:
http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install
Thanks, this is a very good start.
But I am not sure I can simply copy $SPLUNK_HOME/etc/. We are migrating from a CentOS 5 32-bit to CentOS 5 64-bit. I found some 32-bits files related to an installed app: pdfserver. But it seems the 64-bit binaries for this app have been installed at the same time as the 32-bit binaries. Should I understand from this the copy will be fine and the application pdfserver will be ok in the new environment?
Thanks,
Bernard
Hello Bernard,
Your indexes are held in the location specified in your SPLUNK_HOME/etc/splunk-launch.conf. By default, if you aren't using any custom indexes, the location is under /opt/splunk/var/lib/splunk/. The configuration can be retained by copying $SPLUNK_HOME/etc/.
More on this topic can be found here:
http://www.splunk.com/wiki/Deploy:Migrating_a_Splunk_Install