Frequently Asked Questions for Splunk


How do I access a snap storage policy that is associated with a server plan in the CommCell Console?

For each server plan that you create in the Command Center, the software automatically creates a storage policy and a schedule policy in the CommCell Console that have the same name as the server plan. For more information, see Storage Policy - Advanced.

How do I configure snapshot retention using a storage policy?

You can configure snapshot retention in the CommCell Console using the following options:

  • Spool copy (no retention): Snaps that are captured before a backup copy job started are automatically deleted after the backup copy job is complete. For more information, see Enabling Spool Copy.

  • Retain snaps by number of jobs - Snapshots are retained until the specified retention number is reached. The remaining jobs are pruned. For more information, see Retention by Number of Jobs.

How do I configure a backup copy schedule?

You can configure the software to start a new backup copy job after each Splunk IntelliSnap backup. After the backup copy job for a Splunk backup job is complete, a new backup copy job starts for the next Splunk backup. For more information, see Configuring Inline Backup Copy Operations.

What is the minimum space required for LVM snapshots?

The software creates snapshots that are 4 GB. LVM snapshots are COW snapshots, so the snapshots start consuming space only when the data on the source client starts to change. LVM snapshots are valid as long as the change on the source client is smaller than the snapshot that is taken. If there is a large data change on the source client, during a backup, the snapshots might become invalid, and the backup job might fail. For this reason, increase the size of the snapshots using the additional setting nSnapCowSizeMB. The value that you enter for the additional setting is the amount of available space that is required in the volume group, which depends on the data change rate and the time that backups take to complete. For more information, see "Creating Snapshot Volumes" on the Red Hat Customer Portal.

What is the minimum space required for non-LVM snapshots?

For non-LVM snapshot free space, Commvault uses its own driver to create snapshots and bitmaps. By default, these are stored under <Software_Install_Path>/CVBF/cache. This location should have enough free space. This location can be changed using the additional setting sCVBFSNAPPART.

Can I back up and restore smart store indexes?

You can eject indexes to the smart store (AWS object store). When you run backups, the buckets on the clusters are backed up. During restores, indexes are not created, and only buckets are restored.

How do I back up a multisite cluster architecture?

To back up a multisite cluster architecture, create separate Splunk server clients for each site.

How do backups run when a few peer nodes are down?

By default, backups run on all Splunk peer nodes. When a few peer nodes are unavailable, backups run on the peer nodes that are available, and the job status is "Completed with Errors".

What kind of retention does Splunk follow?

Splunk follows days-based retention policy.

Can I run a Splunk backup on a proxy node?

Yes, you can use a client group as a proxy node for hardware-based snapshots to perform indexing operations by mounting the snapshots during snap backups. When you run this backup, the backup copy also runs on the proxy client instead of indexer node.