topic How to specify the path of a custom Database, while creating an index using command line in Splunk Search

How to specify the path of a custom Database, while creating an index using command line

ajay_hbo — Wed, 27 Oct 2010 03:23:01 GMT

Hi I am trying to create an index on the command line as follows (splunk 4.1.4) ./bin/splunk add index indexname -dir $SPLUNK_DB/indexdb

But for some reason, splunk 4.1.4 fails to recognize "-dir". Does any one know if there is another way of specifying the name of my custom splunk DB, at the command line?

Re: How to specify the path of a custom Database, while creating an index using command line

Genti — Wed, 27 Oct 2010 14:00:30 GMT

from the docs:

    To use Splunk's CLI, navigate to the $SPLUNK_HOME/bin/ directory and
use the ./splunk command.
Important: You must stop Splunk before you edit the properties of an
existing index. You do not need to stop Splunk to create a new index.
To add or edit a new index called "fflanda" using the CLI:

./splunk [add|edit] index fflanda

You can also specify a value for any option in indexes.conf by passing
it as a flag (for example, -dir) to the [add|edit] index command.
You must restart Splunk when you create a new index or edit the
properties of an existing index.

The command fails with the following error:

An error occurred:
 Argument "dir" is not supported by this handler.

Will probably file a doc bug tomorrow and try to find the way its supposed to work..

Re: How to specify the path of a custom Database, while creating an index using command line

Genti — Fri, 29 Oct 2010 06:50:35 GMT

Doc Bug filed. Here is the correct command to add an index:

./splunk add index foo -homePath /your/path/foo/db -coldPath /your/path/foo/colddb -thawedPath /your/path/foo/thawedDb