topic Re: Is thawedPath in indexes.conf recommended? in Getting Data In

Is thawedPath in indexes.conf recommended?

sympatiko — Tue, 10 Feb 2015 11:37:55 GMT

Hi Splunkers,

I just want to ask if it is required in indexes.conf to specify the thawedPath?

Thanks,
Eddel

Re: Is thawedPath in indexes.conf recommended?

Sourabhv05 — Tue, 10 Feb 2015 11:42:29 GMT

yes its mandatory.

Re: Is thawedPath in indexes.conf recommended?

sympatiko — Tue, 10 Feb 2015 11:57:29 GMT

Thank u bro!

Can you give some explanation. Explanation based on experience not just giving the splunk doc links 😃 .

Re: Is thawedPath in indexes.conf recommended?

lmyrefelt — Wed, 11 Feb 2015 13:17:05 GMT

set it and forget it 😉

Re: Is thawedPath in indexes.conf recommended?

ppablo — Wed, 11 Feb 2015 23:42:51 GMT

Hi @sympatiko

I tried searching through all Splunk Answers and couldn't find a detailed explanation for this. I know you didn't want to just hear something from the documentation, but it does explicitly say "Required. Splunk will not start if an index lacks a valid thawedPath." So it doesn't seem like there's any ifs ands or buts with this setting. If I hear a more in depth explanation as to why it's required, I'll post an update here.

Re: Is thawedPath in indexes.conf recommended?

sympatiko — Thu, 12 Feb 2015 01:46:36 GMT

Thanks for the info bro! I'm still exploring splunk. Have a great day!