Deployment Architecture

Splunk index move

sriva6
New Member

Hi,

I have all my inputs pointing at index "main" on my existing splunk server. I have added a new indexer to my splunk instance and want to move all the indexes to the main index of the new indexer. Also, want to point all the data inputs to the main index on the new indexer.

Please can you advise what would be the best way to do this?

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Stop old splunk, copy over index, redirect forwarders, start new splunk?

0 Karma

sriva6
New Member

We do not have forwarders.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...