topic Re: Where is actually SPLUNK_DB located? in Deployment Architecture https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265346#M10091 <P>Hi pavanae,</P> <P>again docs to the rescue; it is set in <CODE>splunk-launch.conf</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Splunk-launchconf">http://docs.splunk.com/Documentation/Splunk/latest/Admin/Splunk-launchconf</A></P> <P>cheers, MuS</P> Wed, 07 Oct 2015 02:16:52 GMT MuS 2015-10-07T02:16:52Z Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265345#M10090 <P>Hi,</P> <P>Whenever i create a new index in my licensed standalone version it automatically taking the home path,cold path as follows</P> <P>$SPLUNK_DB/hot/index1/db<BR /> $SPLUNK_DB/cold/index1/db</P> <P>Where can i see the cold and hot bucket logs?</P> Tue, 29 Sep 2020 07:31:23 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265345#M10090 pavanae 2020-09-29T07:31:23Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265346#M10091 <P>Hi pavanae,</P> <P>again docs to the rescue; it is set in <CODE>splunk-launch.conf</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/latest/Admin/Splunk-launchconf">http://docs.splunk.com/Documentation/Splunk/latest/Admin/Splunk-launchconf</A></P> <P>cheers, MuS</P> Wed, 07 Oct 2015 02:16:52 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265346#M10091 MuS 2015-10-07T02:16:52Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265347#M10092 <P>Just a small Clarification so SPLUNK_DB is actually the path in the splunk server or some outside path?</P> Wed, 07 Oct 2015 02:25:44 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265347#M10092 pavanae 2015-10-07T02:25:44Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265348#M10093 <P>No, <CODE>$SPLUNK_HOME</CODE> is the path to Splunk. <CODE>$SPLUNK_DB</CODE> is the path to your <CODE>indexes</CODE> which can be stored outside of Splunk</P> Wed, 07 Oct 2015 02:29:41 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265348#M10093 MuS 2015-10-07T02:29:41Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265349#M10094 <P>Thanks got it</P> Wed, 07 Oct 2015 16:01:01 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265349#M10094 pavanae 2015-10-07T16:01:01Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265350#M10095 <P>Which server is splunk-launch.conf found on? <BR /> It would be helpful to note on ALL questions regarding file locations, which functional node they're on. <BR /> Thanks.</P> Tue, 13 Feb 2018 19:38:37 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265350#M10095 J0hnWebster 2018-02-13T19:38:37Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265351#M10096 <P>This file is used on <STRONG>all</STRONG> Splunk instances, even universal forwarders, and is found in <CODE>$SPLUNK_HOME/etc</CODE> on *nix or <CODE>$SPLUNK_HOME/etc</CODE> on *win</P> <P>cheers, MuS</P> Tue, 13 Feb 2018 19:45:37 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265351#M10096 MuS 2018-02-13T19:45:37Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265352#M10097 <P>What if you have a distributed environment? your indexes are not stored on the local filesystem. Do I need to have $SPLUNK_DB set on my searchhead? </P> Thu, 15 Feb 2018 11:26:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265352#M10097 samhodgson 2018-02-15T11:26:19Z Re: Where is actually SPLUNK_DB located? https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265353#M10098 <P>Indexes are always stored on a local filesystem.<BR /> Even if that filesystem is mounted from elsewhere, Splunk treats it as local (Don't do this btw!)<BR /> Its the same as @MuS mentioned on UFs, HFs, SHs and even distributed indexers.</P> Thu, 15 Feb 2018 14:23:48 GMT https://community.splunk.com/t5/Deployment-Architecture/Where-is-actually-SPLUNK-DB-located/m-p/265353#M10098 nickhills 2018-02-15T14:23:48Z