Indexes are not showing in Search head cluster?

[splunkkrishdee]

Hey Splukers

Its a distributed environment.

we created index in Cluster Master.

We can access the indexes in SH cluster member..

Now I need to create user roles and add specific index to that role //while doing that

the indexes created in CM is not listing 

then I tried  to check in SH .. setting->indexes.. those indexes not listing..

what could be a reason?

Note:
in SH i can see the data if i put index=<index >name..
where i need to start my analysis?

[VatsalJagani]

@splunkkrishdee - Short answer, the index you create on the Cluster Master only stays on the Indexers.

PS Recommendation - You need to deploy the same indexes.conf file on the Search Head to make sure you see the indexes listed on all the places of UI. 

(Forward the data from the SH to Indexers as per recommendation - https://docs.splunk.com/Documentation/Splunk/9.0.2/DistSearch/Forwardsearchheaddata )

(Indexes.conf on the SH will just be used to list the indexes on UI page)

I hope this helps!!!

[SanjayReddy]

Hi @splunkkrishdee 

index that you created it hope you have pushed the those config to indexers(search peers)

and from cluser master you can check all the avalible indexers and indexes from indexer clustring page , you cant see it from searchead indexes section

for assigning index to role , you need to do it from search head 

settings--->roles--> selected user role and edit