Why am I unable to populate the indexes on Intsights app for Splunk in SH?

[AL3Z]

Hi,

While trying to configure the Instights app for splunk in my search head as I'm trying to send the alerts to test index, it is not populating in the app other than these showed indexes..

Thanks.

[scelikok]

Maybe you can try writing if you didn't already. Sometimes apps list only a few indexes but show when you write some letters.

I cannot think of any other reason.

[AL3Z]

hi @scelikok 

I have the 2 search heads in our environment, If i create a index on one of the search head it get populated in the remaining  search head also , now my question is why its not populating.

ciao

[AL3Z]

@scelikok 

I have tried writing the index test but it's not populating  the index name why so ??

[scelikok]

Hİ @AL3Z,

If you are using separate indexers or indexer clustering you may not see the indexes defined on indexers or cluster. If the app does not allow you to type index name your should manually add this test index to your SH index settings. After that, you will be able to select test index. 

[AL3Z]

@scelikok 

I have manually added the test index to the SH where the Intsights app is installed.

Even though the created test index is not populating on the app ?