Archive
Highlighted

where these custom indexes are getting stored on indexer server?

Engager

I have created indexes using splunk web. can anyone tell where these custom indexes are getting stored on indexer server?

Tags (1)
0 Karma
Highlighted

Re: where these custom indexes are getting stored on indexer server?

SplunkTrust
SplunkTrust

Hi @vowner,

The index data files are stored under your SPLUNK_DIR/var/lib/splunk

Index configuration files are stored based on the app context. If you were creating it from Search app, then it should be in etc/apps/search/local/indexes.conf

Another easiest way to find all information is running the btool

splunk cmd btool indexes list --debug
0 Karma
Highlighted

Re: where these custom indexes are getting stored on indexer server?

SplunkTrust
SplunkTrust

Hi @vowner,
Did this work for you?

0 Karma