Deployment Architecture

Add and use a new index without restarting Splunk

Krishna_R
Path Finder

Is it possible to create a new index and start using without restarting server, so that other users will see no impact?

Tags (2)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

No. The indexer in 4.1.x (and below) must be restarted for a new index to be added.

Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...