hi,
I want to test if I can restore only my configuration of my splunk server (indexer and forwarder). I don't want to restore all my data because i don't have enough disk space available.
My original location of splunk is d:\splunk, d:\splunk_data, d:\splunk_archive.
The new server has a different name and the location is c:\splunk.
I follow these steps :
copy d:\splunk\etc (backup of splunk config)
install new splunk (same version) on new server (with different server name)
copy backup files to new server in c:\splunk\etc
restart splunk
But this is not working.
Probably because my splunk installation is now on my c-drive and my server name is not the same. Can I simply change this to the new environment ?
Do I also need to restore the data (d:\splunk_data) to test if my new splunk is working ?
Is there a simple procedure to do this ?
thanks
... View more