Splunk Dev

how to copy data from one indexer to another indexer?

Kratika
New Member

Hi,

We are going to install a new indexer on same host where our old indexer is running as our splunk license is going to expire. Can you please let me know how we can copy the whole data(configuration and all other data) from old indexer to the new indexer.

Thanks & Regards,
Kratika

Tags (2)
0 Karma

mship
Path Finder

If you are on windows and use xcopy. I will simplify for sake of space

xcopy "C:<path to indexes>" "\\C:<path to index>" (options ex: /e /c /s ...)

0 Karma

RicoSuave
Builder

http://www.splunk.com/base/Documentation/latest/Admin/Whatyoucanbackup

You'll find all the info you need here.

Maybe i'm misunderstanding, but why not just upgrade the license?

0 Karma

Drainy
Champion

Hi,

One of my early questions was similar to this. I had one indexer running and a few days later installed a new one remotely. When I set it to forward it only forwarded everything from that point.
Here is my question

The answer I got was that I needed to physically copy/paste the buckets over from one to the other, I would assume the same case for the configuration files

Here is the link on migrating indexes
http://www.splunk.com/wiki/Community:MoveIndexes

Hope this helps

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...