Not getting Indexes list in Indexer cluster.

[kunalwalmart]

My cluster master is not listing the indexes that are being shared by the peers, if I run a search

indexes=* | stats count by index

I am getting results but I am not able to see the same in settings -> Data -> Indexes

I have tried it in search head also no luck even there.

[harsmarvania57 · Accepted solution]

Hi @kunalwalmart,

Indexes which are avilable on Indexers are not visible in settings -> Data -> Indexes on Cluster Master and SH because these indexes are actually not present on CM and SH.

To check indexes which are available on your indexer cluster and those indexes hold some data, those are available on CM in Settings -> Indexer Clusterting.

I hope this helps.

Thanks,
Harshil

[kunalwalmart]

So for any changes in the indexes I need to go and do them in config files ?

[harsmarvania57]

Yes, when you want to change any index config on Indexer which are in Indexer Cluster, you need to change config files in $SPLUNK_HOME/etc/masterapps/<your app>/local/indexes.confon Cluster Master and then you need to push bundle from Cluster Master to Indexer.