Installing CIM in a clustered environment- Has anyone managed to install CIM in a clustered environment without issues?

[joshiro]

The CIM documentation says that we should install CIM only on SH. But it contains an indexes.conf in default.
Should we leave the indexes.conf in the SHC? in this case the index defined inside indexes.conf wont be usable because is not defined in the indexer cluster.

We dont know if it is correct to define the CIM indexes.conf in the SHC instead of the indexers.

Anyone managed to install CIM in a clustered environment without issues?

[richgalloway]

Remove the CIM's indexes.conf file from the deployment-apps shcluster directory before you apply the shcluster bundle.

[joshiro]

We will remove the indexes.conf from the bundle.
But we still need to define it in the indexers? is that correct?

[richgalloway]

CIM does not get installed on indexers.

[joshiro]

I know that the documentation says it is installed only on SHC, but i still dont understand why CIM defines indexes in default if we are suposed to remove it from the SH bundle and never install it on the indexers.

I feel that something wont work correctly if we dont deploy that index definition. Unless its deprecated and shouldnt be there.

[richgalloway · Accepted solution]

As the documentation cited by @PickleRick says, indexes.conf is deprecated in the app  The docs specify which indexes the app uses so admins can make sure they exist.

[PickleRick]

https://docs.splunk.com/Documentation/CIM/5.0.2/User/Install