# Splunk data to elasticsearch migration

**URL:** <https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623>\
**Category:** Elasticsearch\
**Created:** [June 1, 2021, 11:36am UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623 "2021-06-01T11:36:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mruthyu](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Post date:** [June 1, 2021, 11:36am UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623/1 "2021-06-01T11:36:37Z")

</div>

Is there a way data from Splunk can be indexed into elasticserach considering few tens of TB of data? Is there any utility program which can be used to export data from splunk?

Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 1, 2021, 11:51am UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623/2 "2021-06-01T11:51:06Z")

</div>

Would this help you?

> **[Migrating from Splunk to the Elastic (ELK) Stack: Data migration](https://www.elastic.co/blog/migrating-from-splunk-to-the-elastic-elk-stack-data-migration)**
>
> Due to licensing challenges as well as new requirements for fast searching capabilities, many customers have been moving from Splunk to the Elastic (ELK) Stack. Find out just how easy it is to migrate your data from Splunk to Elastic.

---

<div class="post-metadata">

**Author:** ![mruthyu](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Post date:** [June 1, 2021, 12:08pm UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623/3 "2021-06-01T12:08:54Z")

</div>

Thanks. I have seen this blog. Since splunk data few tens of TB, instead of REST API or ODBC, an approach of exporting the data to filesystem (csv or JSON files)will help.

You can also use the [Splunk API](https://docs.splunk.com/Documentation/Splunk/latest/Search/ExportdatausingRESTAPI) to export data, or you can connect via [ODBC](https://docs.splunk.com/Documentation/ODBC/2.1.1/UseODBC/HowSplunkODBCDriverfitsintotheSplunkpicture). The approach you use will depend on the use case, volume of data, and type of data you are working with.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 29, 2021, 12:09pm UTC](https://discuss.elastic.co/t/splunk-data-to-elasticsearch-migration/274623/4 "2021-06-29T12:09:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.