Deployment Architecture

How to move db location of one Index in Indexer clustering

dvohra
Explorer

Hi,

My requirement is to move DB location of only one Index but not all Indexes in the same indexer. Is it possible ?

 

Labels (3)
0 Karma
1 Solution

scelikok
Champion

splunk-launch.conf file has config for SPLUNK_DB variable which will change all index locations.

On my sample setting in indexes.conf I didn't use SPLUNK_DB variable, that is why this variable does not effect the location. 

Please remember after your change the path in indexes.conf and push new config to indexers, old indexed data will not be moved by Splunk. You should copy all old files to new path on all indexers and restart indexers again.

If this reply helps you an upvote is appreciated.

View solution in original post

0 Karma

scelikok
Champion

splunk-launch.conf file has config for SPLUNK_DB variable which will change all index locations.

On my sample setting in indexes.conf I didn't use SPLUNK_DB variable, that is why this variable does not effect the location. 

Please remember after your change the path in indexes.conf and push new config to indexers, old indexed data will not be moved by Splunk. You should copy all old files to new path on all indexers and restart indexers again.

If this reply helps you an upvote is appreciated.

View solution in original post

0 Karma

scelikok
Champion

Hi @dvohra,

Each index has its own home, cold and thawed location path. You can change particular index setting under its stanza.

https://docs.splunk.com/Documentation/Splunk/8.1.2/Indexer/Configureindexstorage#Configure_index_pat...

Sample;

[index_name]
homePath   = /data/new_indexPath/index_name/db
coldPath   = /data/new_indexPath/index_name/colddb
thawedPath = /data/new_indexPath/index_name/thaweddb
If this reply helps you an upvote is appreciated.
0 Karma

dvohra
Explorer

Thanks for the details.

But there is a config File which is global for all indexes $SPLUNK_HOME/etc/splunk-launch. conf

Do we need to make any changes there ?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!