Deployment Architecture

Not getting Indexes list in Indexer cluster.

Engager

alt text

My cluster master is not listing the indexes that are being shared by the peers, if I run a search

indexes=* | stats count by index

I am getting results but I am not able to see the same in settings -> Data -> Indexes

I have tried it in search head also no luck even there.

0 Karma
1 Solution

SplunkTrust
SplunkTrust

Hi @kunalwalmart,

Indexes which are avilable on Indexers are not visible in settings -> Data -> Indexes on Cluster Master and SH because these indexes are actually not present on CM and SH.

To check indexes which are available on your indexer cluster and those indexes hold some data, those are available on CM in Settings -> Indexer Clusterting.

I hope this helps.

Thanks,
Harshil

View solution in original post

SplunkTrust
SplunkTrust

Hi @kunalwalmart,

Indexes which are avilable on Indexers are not visible in settings -> Data -> Indexes on Cluster Master and SH because these indexes are actually not present on CM and SH.

To check indexes which are available on your indexer cluster and those indexes hold some data, those are available on CM in Settings -> Indexer Clusterting.

I hope this helps.

Thanks,
Harshil

View solution in original post

Engager

So for any changes in the indexes I need to go and do them in config files ?

0 Karma

SplunkTrust
SplunkTrust

Yes, when you want to change any index config on Indexer which are in Indexer Cluster, you need to change config files in $SPLUNK_HOME/etc/masterapps/<your app>/local/indexes.confon Cluster Master and then you need to push bundle from Cluster Master to Indexer.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!