Index Replication Set Up- Why are my indexes not showing up?

[SpockGin]

Hi All,

I have a blanket index cluster and a cluster manager.

I have added some config to push out an indexes.conf file with repFactor = auto.

The config applyed and rolled out sucessfully to the peer nodes. However, when i look at the SH on the Cluster Manager under, settings > indexer clustering, I cannot see the indexes as replicated.

On a clustered indexer, the config is as follows:

/opt/splunk/etc/peer-apps/_cluster/local/indexes.conf

[hoopla]
repFactor = auto
homePath = $SPLUNK_DB/hoopla/db
coldPath = $SPLUNK_DB/hoopla/colddb
thawedPath = $SPLUNK_DB/hoopla/thaweddb

I've tried a few variations and am a bit puzzled - Am I doing anything massivley wrong here? Should i see empty indexes here?

[gcusello]

Hi @SpockGin,

let me understand: where do you located the indexes.conf?

it must be in the Master Node at

/opt/splunk/etc/manager-apps/_cluster

 or in a dedicated app in 

/opt/splunk/etc/manager-apps/

Then you have to push it to the peers using a CLIcommand or using GUI.

Ciao.

Giuseppe

[SpockGin]

Thank you for the reply.

So the indexes.conf file is located in: /opt/splunk/etc/manager-apps/_cluster/local/

This has been pushed to the peers and a rolling restart completed.

The indexes appear in the cluster under /opt/splunk/etc/peer-apps/_cluster/local/ as I would expect. So the cluster manager is working.

The problem i am having is creating new indexes for replication - The replicated indexes do show as replicated when i go to the indexer clustering, under settings on the local Search Head as in the screenshot.

Thanks

[gcusello · Accepted solution]

Hi @SpockGin,

I suppose that when you say " local Search Head", you're meaning the Master Node.

Anyway, have you alredy indexed some data? if not you don't see the index in the dashboard you shared.

See, using the Monitoring Console, if the index is correctly configured and if there are indexed data.

Ciao.

Giuseppe

[SpockGin]

So don't see the index in the dashboard you shared... Is this documented anywhere? I had a suspicion about this , though could not find anything in the docs.

I put some data in and it showed up which is great thanks.

Thanks again for your help.

SpockGin

[SpockGin]

Hi gcusello,

Will replicated indexes only show if there is data then? Very curious. I'll try populating and see how it goes and set up the Monitoring Console.

Thanks for your time.

SpockGin

---

@gcusello wrote:

Hi @SpockGin,

I suppose that when you say " local Search Head", you're meaning the Master Node.

Anyway, have you alredy indexed some data? if not you don't see the index in the dashboard you shared.

See, using the Monitoring Console, if the index is correctly configured and if there are indexed data.

Ciao.

Giuseppe

---