We have an indexer cluster with several custom indexes configured in the indexes.conf, however when we run:
splunk show cluster-status --verbose
only the main index shows up (among internal _ indexes).What could be the reason for that?
When searching via the search heads, the indexes all work fine.
That had been a major indexes.conf misconfiguration on our side.In fact our indexes were not replicated at all, because we didn't have the repFactor=auto set on them.Cf. https://docs.splunk.com/Documentation/Splunk/8.0.4/Indexer/ConfigurethepeerindexesAfter fixing that the indexes appear in show cluster-status --verbose and in the UI
View solution in original post
The same applies to the Monitoring Console in the Web UI BTW