topic Splunk shows cluster-status --verbose only shows 'main' index in Deployment Architecture

Splunk shows cluster-status --verbose only shows 'main' index

kutzi — Fri, 03 Jul 2020 19:11:35 GMT

We have an indexer cluster with several custom indexes configured in the indexes.conf, however when we run:

splunk show cluster-status --verbose

only the main index shows up (among internal _ indexes).
What could be the reason for that?

When searching via the search heads, the indexes all work fine.

Re: splunk show cluster-status --verbose only shows 'main' index

kutzi — Wed, 01 Jul 2020 13:57:29 GMT

The same applies to the Monitoring Console in the Web UI BTW

Re: splunk show cluster-status --verbose only shows 'main' index

kutzi — Wed, 08 Jul 2020 07:23:28 GMT

That had been a major indexes.conf misconfiguration on our side.
In fact our indexes were not replicated at all, because we didn't have the repFactor=auto set on them.
Cf. https://docs.splunk.com/Documentation/Splunk/8.0.4/Indexer/Configurethepeerindexes

After fixing that the indexes appear in show cluster-status --verbose and in the UI