Deployment Architecture

where these custom indexes are getting stored on indexer server?

vowner
Engager

I have created indexes using splunk web. can anyone tell where these custom indexes are getting stored on indexer server?

Tags (1)
0 Karma

renjith_nair
Legend

Hi @vowner,

The index data files are stored under your SPLUNK_DIR/var/lib/splunk

Index configuration files are stored based on the app context. If you were creating it from Search app, then it should be in etc/apps/search/local/indexes.conf

Another easiest way to find all information is running the btool

splunk cmd btool indexes list --debug
Happy Splunking!
0 Karma

renjith_nair
Legend

Hi @vowner,
Did this work for you?

Happy Splunking!
0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...