Hi. We are migrating our Splunk instance to a new server. We do not want it to re-index a directory that we have as a monitor. It was recommended that I copy over our fishbucket.
I'm looking in /opt/splunk/var/lib/splunk and I see _thefishbucket.dat, but it's empty.
How can I prevent a re-index if my fishbucket is empty?
Thanks!
↧