You can back up a Splunk cluster on demand.
From the navigation pane, go to Protect > Big data.
The Apps page appears.
In the row for the cluster, click the action button , and then click Back up.
The Select backup level dialog box appears.
Under Backup level, select the type of backup that you want to perform, either Full or Incremental.