Cluster - Can you symlink .../system/local/ to .../master-apps/_cluster/local/ ?

[thisissplunk]

When you use the API to create index stanzas on a master, it places it in .../system/local/. API endpoint:

/servicesNS/nobody/system/configs/conf-indexes

The best practice to deploy this config with a cluster bundle is to copy it from that directory and into .../master-apps/_cluster/local/ https://answers.splunk.com/answers/387133/how-to-create-index-using-rest-api-in-a-clustered.html

Instead, could we symlink the directories together so OS level access to copy the file over is never needed in the first place? In other words, does apply cluster-bundle work if we symlinked the master-apps directory?

[vanvan]

Hi,

I don't know if this helps, but there's an app for clustered indexes: https://splunkbase.splunk.com/app/3683/

Cheers!