Migrating to using volumes in indexes.conf

[supersleepwalke]

Now that Splunk 4.2 introduced the concept of volumes for storing indexes, I'd like to change my configs to use it. (Our storage solution matches their example, fast local RAID 0+1 for hot/warm buckets, a NAS for cold storage.)

Configure index size with volumes

If I change my indexes.conf to using the volume concept, and make sure that they all end up pointing to the same directories as my original config, will that work properly? Will buckets still end up in the same place as before, and retirement still work seamlessly?

[jbsplunk · Accepted solution]

As long as your volumes are all pointing to the folders you'd like them to use, everything should go seemlessly once you hit the threshold specified for rotation. You will need to restart once you apply these changes.