topic Re: Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Butto in Splunk Enterprise

Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Button Disabled?

sushainmagotra1 — Mon, 26 Sep 2022 10:52:09 GMT

Hello,

I recently migrated few of my Indexes to Smartstore Indexes using Azure. After the migration, now when I go to the Indexes page on my Splunk Web UI, the "New Index" button is disabled and it says "Disabled new index for Smart store Indexes".

Does this mean I cannot create any new Splunk Indexes via Splunk Web directly now, or is it a bug? How can I re-enable the "New Index" button now?

(I am using Splunk Enterprise verson 9.0.1 and a single instance)

Re: Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Butto

isoutamo — Wed, 28 Sep 2022 11:55:41 GMT

my expectation is that as you cannot add needed information to use S2 with GUI it has disabled for that reason. You must add indexes by conf files after you have enabled S2.

That is told on https://docs.splunk.com/Documentation/Splunk/9.0.1/Indexer/AddSmartStoreindextocluster

r. Ismo

Re: Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Butto

sushainmagotra1 — Thu, 29 Sep 2022 08:46:59 GMT

Hi r.Ismo,

Thanks for your reply. But what if I want to add a non smart store index ( a normal splunk index). For that also now I have to use indexes.conf every time?

So that means once Smart store is activated for even one index, we cannot add even non smart store indexes through GUI?

Re: Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Butto

isoutamo — Thu, 29 Sep 2022 14:05:14 GMT

Exactly that way.