How to increase the index size across a multisite indexer cluster?

[davidbrummy]

So I have been following the example for updating an index size on a cluster. I tested it out on our dev environment and it worked fine. I went to do it in our prod environment that I inherited and it is a multisite cluster so as the documentation says, the "edit button is disabled for multisite clusters".

So how do you increase an index size across a multisite indexer cluster?

[Steve_G_ · Accepted solution]

If you want to make changes to the specifications for an index, you should do so on all peer nodes, not just one. The best way to do that is to make the changes in indexes.conf and then distribute the file to all the peer nodes via the configuration bundle method. See:

• http://docs.splunk.com/Documentation/Splunk/6.4.2/Indexer/Configurethepeerindexes
• http://docs.splunk.com/Documentation/Splunk/6.4.2/Indexer/Updatepeerconfigurations

[davidbrummy]

Thanks. We managed to get it to work through the CLI

Use the CLI to apply the bundle

1. To apply the configuration bundle to the peers, run this CLI command on the master:

splunk apply cluster-bundle