topic Re: Index not created in Getting Data In

Index not created

lmjoin — Tue, 29 Sep 2020 22:31:59 GMT

Hello Team,

I have created folder /opt/splunk/etc/master-apps/sita9 and put indexes.conf under it and push bundle by master. folder and indexes.conf are now present on peer. But index ( sita9) are not created /opt/splunk/var/lib/splunk/ ,i have restarted manually peer also.

[sita9]
homePath = $SPLUNK_DB/$_index_name/db
coldPath = $SPLUNK_DB/$_index_name/colddb
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
repFactor = auto

Please help.

Thanks
Lalit

Re: Index not created

richgalloway — Sun, 23 Dec 2018 13:39:22 GMT

Did you enter the file path correctly in your question? It should be /opt/splunk/etc/master-apps/sita9/default.

Re: Index not created

lmjoin — Sun, 23 Dec 2018 14:10:56 GMT

Thanks it is done , i have one more question , so we have to put props.conf and transforms.conf under /opt/splunk/etc/master-apps/sita9/default for routing or filter data.

Re: Index not created

richgalloway — Sun, 23 Dec 2018 14:26:45 GMT

Yes. All .conf files go in either 'default' or local.

If your problem is resolved, please accept the answer to help future readers.