Deployment Architecture

How to create indexes to be replicated in an indexer clustering environment?

Ahmedkhalil
Path Finder

Hi All,

I have configured indexer clustering in Splunk, but I don't know how to create indexes that are replicated in this cluster.

0 Karma
1 Solution

Steve_G_
Splunk Employee
Splunk Employee

This topic addresses in detail the issue of how to configure indexes in a cluster:

http://docs.splunk.com/Documentation/Splunk/6.3.1/Indexer/Configurethepeerindexes

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

This topic addresses in detail the issue of how to configure indexes in a cluster:

http://docs.splunk.com/Documentation/Splunk/6.3.1/Indexer/Configurethepeerindexes

john_glasscock
Path Finder

Trying to follow the document.... which file do you have to manually update with the new index?

Splunkhome/etc/master-apps/_cluster/local/(server.conf) sorry I ment indexes.conf on the master node?

Then reapply the cluster?

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

You create indexes in indexes.conf, not server.conf. You update the file on the master node and then use the CLI command 'splunk apply cluster-bundle' to deploy the updates to the peer nodes.

For details on updating configurations via that command, see: http://docs.splunk.com/Documentation/Splunk/6.3.1/Indexer/Updatepeerconfigurations

(referenced from the 'configure peer indexes' topic as well)

0 Karma

Ahmedkhalil
Path Finder

Ok thank you so much 🙂

0 Karma

john_glasscock
Path Finder

Sorry, I was asking Steve G., I am having the same issue. I have added the indexes there and it pushes out the other indexes, but does not show on the deployment server under indexing cluster page.

0 Karma

Ahmedkhalil
Path Finder

as i read from document you have first to send data to newly created indexes in order to see them

0 Karma

Steve_G_
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...