Deployment Architecture

In trying to create coldToFrozenDir, has anyone seen the following "load IndexConfig" error?

sreejith2k2
Explorer

I am trying to create coldToFrozenDir on one of my network indexes. I am trying to do this in the Development environment before going to production environment.

[volume:frozen]
path = /opt/frozen/network

[network]
homePath = volume:primary/network/db
coldPath = volume:primary/network/colddb
thawedPath = $SPLUNK_DB/network/thaweddb
coldToFrozenDir = volume:frozen/network/frozendb
maxTotalDataSizeMB = 55000
frozenTimePeriodInSecs = 7776000

But, I am getting the following error —

Problem parsing indexes.conf: Cannot load IndexConfig: Cannot create index 'network':path of coldToFrozenDir must be absolute ('volume:frozen/network/frozendb')
Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at   http://www.splunk.com/page/submit_issue

I've have even tried specifying path with no luck -

coldToFrozenDir = /opt/frozen/network

I am getting the same error. It's on the same file system

0 Karma

horsefez
Motivator

Does the splunk user has sufficient permissions to create a directory at that location?

0 Karma

sreejith2k2
Explorer

yes he has.. I have cross checked it.. Also I re-ran chown command as well.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...