Configuring Disaster Recovery Backups for a Splunk Cluster

Configure file system agent on each node of the Splunk cluster, and then back up the Splunk clustered indexes using the Splunk agent.

Procedure

Do the following for recovery backups of Splunk cluster:

1. Configure the file system agent on each node of the Splunk cluster to back up the contents of the etc folder in the Splunk installation directory ($SPLUNK_HOME/etc).

2. Back up the Splunk clustered indexes using the Splunk agent. The backups run as per the server plan that you selected for the cluster.

   Note: To immediately prepare a disaster recovery backup, manually back up the clustered indexes.