How to move db location of one Index in Indexer clustering

[dvohra]

Hi,

My requirement is to move DB location of only one Index but not all Indexes in the same indexer. Is it possible ?

[scelikok · Accepted solution]

splunk-launch.conf file has config for SPLUNK_DB variable which will change all index locations.

On my sample setting in indexes.conf I didn't use SPLUNK_DB variable, that is why this variable does not effect the location. 

Please remember after your change the path in indexes.conf and push new config to indexers, old indexed data will not be moved by Splunk. You should copy all old files to new path on all indexers and restart indexers again.

[scelikok]

Hi @dvohra,

Each index has its own home, cold and thawed location path. You can change particular index setting under its stanza.

https://docs.splunk.com/Documentation/Splunk/8.1.2/Indexer/Configureindexstorage#Configure_index_pat...

Sample;

[index_name]
homePath   = /data/new_indexPath/index_name/db
coldPath   = /data/new_indexPath/index_name/colddb
thawedPath = /data/new_indexPath/index_name/thaweddb

[dvohra]

Thanks for the details.

But there is a config File which is global for all indexes $SPLUNK_HOME/etc/splunk-launch. conf

Do we need to make any changes there ?