Deployment Architecture

Does indexes.conf get generated as part of the initialization of an indexer and/or the initialization of an indexer cluster?

transtrophe
Communicator

I am just building an indexer cluster with replication factor of 9 using 15 indexers configured as peers on the master. Running Splunk 6.2.2 on Debian hosts with Debian upgraded to current rev. This all sets up correctly except for one factor: I don't have an indexes.conf anywhere on either the master or the peers. Is this expected when first setting up the cluster?

0 Karma
1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Did you look in the default location on the peer nodes ($SPLUNK_HOME/etc/slave-apps/_cluster/default)? There should be an indexes.conf file there.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/Indexer/Configurethepeerindexes and
http://docs.splunk.com/Documentation/Splunk/6.2.2/Indexer/Updatepeerconfigurations#On_the_peers

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

Did you look in the default location on the peer nodes ($SPLUNK_HOME/etc/slave-apps/_cluster/default)? There should be an indexes.conf file there.

See: http://docs.splunk.com/Documentation/Splunk/6.2.2/Indexer/Configurethepeerindexes and
http://docs.splunk.com/Documentation/Splunk/6.2.2/Indexer/Updatepeerconfigurations#On_the_peers

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...