https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315253#M5466 <P><A href="https://answers.splunk.com/answers/30986/why-is-my-index-disabled.html">https://answers.splunk.com/answers/30986/why-is-my-index-disabled.html</A></P> Wed, 28 Feb 2018 09:42:05 GMT zhangquanacc 2018-02-28T09:42:05Z https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315252#M5465 <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4451i75F778EA2869B829/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>There is no error about it in splunkd.log</P> <P><A href="https://answers.splunk.com/answers/30986/why-is-my-index-disabled.html">link text</A></P> <P>From this link,i checked and there is no bucket with the same id.<BR /> What do i do now ?</P> Wed, 28 Feb 2018 09:40:20 GMT https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315252#M5465 zhangquanacc 2018-02-28T09:40:20Z https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315253#M5466 <P><A href="https://answers.splunk.com/answers/30986/why-is-my-index-disabled.html">https://answers.splunk.com/answers/30986/why-is-my-index-disabled.html</A></P> Wed, 28 Feb 2018 09:42:05 GMT https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315253#M5466 zhangquanacc 2018-02-28T09:42:05Z https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315254#M5467 <P>I have also just recently encounter this problem. Did you find a resolution? </P> Tue, 18 Dec 2018 02:05:25 GMT https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315254#M5467 lznger88_2 2018-12-18T02:05:25Z https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315255#M5468 <P>may i know if are you able to search <CODE>index=_internal</CODE> or these disabled indexes?</P> Tue, 18 Dec 2018 09:49:05 GMT https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315255#M5468 inventsekar 2018-12-18T09:49:05Z https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315256#M5469 <P>Not able to search any internal index. I have found the issue, it was the way the Splunk roles have been set up and incorrectly defining the roles in the authorize.conf file </P> Tue, 18 Dec 2018 22:01:41 GMT https://community.splunk.com/t5/Knowledge-Management/why-are-my-indexes-disabled/m-p/315256#M5469 lznger88_2 2018-12-18T22:01:41Z