topic where these custom indexes are getting stored on indexer server? in Deployment Architecture

where these custom indexes are getting stored on indexer server?

vowner — Fri, 22 Jun 2018 06:40:09 GMT

I have created indexes using splunk web. can anyone tell where these custom indexes are getting stored on indexer server?

Re: where these custom indexes are getting stored on indexer server?

renjith_nair — Fri, 22 Jun 2018 15:39:13 GMT

Hi @vowner,

The index data files are stored under your SPLUNK_DIR/var/lib/splunk

Index configuration files are stored based on the app context. If you were creating it from Search app, then it should be in etc/apps/search/local/indexes.conf

Another easiest way to find all information is running the btool

splunk cmd btool indexes list --debug

Re: where these custom indexes are getting stored on indexer server?

renjith_nair — Mon, 25 Jun 2018 13:19:36 GMT

Hi @vowner,
Did this work for you?