How do you set/change the default index for SNMP Modular Input?

[chris_thuys]

How do you set/change the default index, I know there is an index drop down in the more settings section. On mine it only has default. How can I add extra indexes to this dropdown.
My splunk setup uses separate indexer and search head.

[Damien_Dallimor · Accepted solution]

I presume then that you have tried to install the Modular Input on a Search Head where you don't have your indexes defintions, hence , no indexes in the drop down ?

Furthermore , it is incorrect to install the Mod Input here in a distributed architecture. You should install it on an Indexer or Forwarder node. In this scenario you can then setup the SNMP stanza by editing inputs.conf directly.

[chris_thuys]

As this is a test environment and I am not an administrator for this splunk implementation, snmp mod input was installed on the search head. I have discovered that the reason I could not change the index was my lack of appropriate access. The admin has the access and was able to change the index for me.