Splunk® IT Essentials Work

Administration Manual

This documentation does not apply to the most recent version of Splunk® IT Essentials Work. For documentation on the most recent version, go to the latest release.

Create a full backup of ITE Work

Create a full backup of to make a copy of all your configuration information. Taking regular backups from a healthy environment enables you to restore from a backup in the event of a disaster, or if you add a search head to a cluster. You can also take a backup before migrating to a different machine.

Make sure to be familiar with the standard backup and restore tools and procedures used by your organization.

For more information about ITE Work backups, including what gets backed up, see Overview of backing up and restoring ITE Work KV store data.


Prerequisites

  • You must have the itoa_admin role or the write_itsi_backup_restore capability to create a backup job.
  • Before creating a backup, make sure no service templates are syncing. Check the sync status of service templates by clicking Configuration > Service Templates from the main ITE Work menu.

Steps

  1. From the main menu, click Configuration > Backup/Restore.
  2. Click Create Job > Create Backup Job.
  3. Select Full Backup.
  4. Provide a name and description of the backup job.
  5. (Optional) Enable Include .conf files to back up the following configuration files located in $SPLUNK_HOME/etc/apps/SA-ITOA/local and $SPLUNK_HOME/etc/apps/itsi/local:

    ITE Work backs up these .conf files only if they exist in a non-default directory, such as $SPLUNK_HOME/etc/apps/itsi/local. For more information, see About configuration files. When restored, the backed up .conf file overrides the existing local version.

  6. Click Create.

The backup job appears on the Backup/Restore Jobs page with the status "Queued" until the job runs. When the backup job finishes, the status changes to "Completed" and a confirmation message appears in the Messages drop-down list in Splunk Web.

You can run any completed backup job again by clicking Edit > Start Backup in the Actions column. You can also modify the completed backup job before running it again.

Next steps

To restore the backup you created, see Restore a full or partial backup of ITE Work.

Last modified on 19 December, 2023
About default scheduled backups in ITE Work   Create a partial backup of ITE Work

This documentation applies to the following versions of Splunk® IT Essentials Work: 4.9.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.10.0 Cloud only, 4.10.1 Cloud only, 4.10.2 Cloud only, 4.10.3 Cloud only, 4.10.4 Cloud only, 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.6, 4.12.0 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters