Migrating MHN to a new Box

THIS IS A WORK IN PROGRESS

Migrating Splunk:

• I have not done this so I am not sure, but ... http://answers.splunk.com/answers/138710/splunk-migration-to-another-server.html

Migrating MHN:

• on the old box, stop all the MHN and splunk processes (verify this by running ps -ef after these commands):

   sudo supervisorctl stop all
   sudo /etc/init.d/splunk stop
   sudo /etc/nginx stop
   sudo /etc/init.d/mongod stop

• install MHN as new on the new box (mainly to get all the OS packages installed properly)
• rm -rf /opt/{mhn,hpfeeds,honeymap,mnemosyne,splunk*} on the new box, this will be replaced by the dirs via rsync
• rsync the entire /opt/* directory down to your new box
• rm -rf /var/log/mhn/* on the new box, this will get replaced by the data via rysnc
• rsync the entire /var/log/mhn/* directory down to your new box
• dump the data from mongo DB on the old box (hpfeeds and mnemosyne DBs) using mondodump
• then import the data into MongoDB on the new box using mongoimport
• reconfigure all honeypots' hpfeeds to point to the new IP address of the MHN server.