Splunk Base : SplunkGeneral : #4150

Reindex existing data?

gkanapathy — Mon, 15 Mar 2010 18:52:25 PDT

There should be no need to reindex. If you've copied the database (and data) that should be the most important thing. The other part you might need is the configuration if you didn't also copy that to your new machine.

Reindex existing data?

rachel — Mon, 15 Mar 2010 10:54:35 PDT

you can't manipulate/reindex in place the data that Splunk has already indexed.

what exactly is happening with respect to your problems extracting fields?

Reindex existing data?

mreliga — Mon, 15 Mar 2010 04:41:54 PDT

Dear All,

Is it possible to reindex existing data? I had to move SPLUNK databases from one server to another.
The problem is that I seem to be unable to correctly extract fields. I was able to do this in the original server.

I thought it might have something to do with the fact that the databases came from a different server.

Is it possible to get SPLUNK to reindex data in its databases? I cannot just clean index as the data is only stored in SPLUNK DBs.

Any help appreciated.

Regards,

Michael