IDX multi-site cluster (1 master, 3 peers)
I am wanting to move the defaultdb/main index to a bigger disk and I am hoping I can do this via an entry in indexes.conf and pushing via a bundle to the peers.
Is it as straight forward as adding the following to /opt/splunk/etc/master-apps/_cluster/local/indexes.conf (as I do for other indexes I have created)
Then run 'splunk apply cluster-bundle'
Do i have to do anything or will this in effect move the defaultdb/main index to the new path I have already created?
This worked - I added the path in the indexes.conf listed above, applied the bundle and data started flowing to the new path - all paths updated too.
I did create the directory structure first before applying the bundle to the idx peers.
View solution in original post