Deployment Architecture

How to replicate index to all the slave indexers?

vikcee
Path Finder

I have created a 5 node index cluster and its working fine. Now I created an index in master indexer and added some data. But I am not able to replicate that index to all the slave indexer.
I added repFactor = auto to my indexes.conf file in /opt/splunk/etc/apps/search/local/ directory. but not working then I created a same file in /opt/splunk/etc/system/local as well, But again its not working. Can someone suggest where I am doing wrong.

Below is my indexes.conf file

[test]
coldPath = $SPLUNK_DB/test/colddb
enableDataIntegrityControl = 0
enableTsidxReduction = 0
homePath = $SPLUNK_DB/test/db
maxTotalDataSizeMB = 512000
thawedPath = $SPLUNK_DB/test/thaweddb
repFactor = auto
1 Solution

iammusa18
Engager

Hi,
1. You should never make cluster related edits under /system/local
2. Your indexes.conf file shouldn't be in '/opt/splunk/etc/apps/search/local' but instead in /etc/master-apps folder on the cluster master.

All configs to slave indexers MUST be pushed from /etc/master-apps and the recieving slaves will save those configs (indexes.conf, props.conf etc) under /etc/slave-apps.

Please check your configs and you will see that your test index will be there once you get your directory strucutre sorted.

HTH

View solution in original post

0 Karma

iammusa18
Engager

Hi,
1. You should never make cluster related edits under /system/local
2. Your indexes.conf file shouldn't be in '/opt/splunk/etc/apps/search/local' but instead in /etc/master-apps folder on the cluster master.

All configs to slave indexers MUST be pushed from /etc/master-apps and the recieving slaves will save those configs (indexes.conf, props.conf etc) under /etc/slave-apps.

Please check your configs and you will see that your test index will be there once you get your directory strucutre sorted.

HTH

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...