Where is actually SPLUNK_DB located?

[pavanae]

Hi,

Whenever i create a new index in my licensed standalone version it automatically taking the home path,cold path as follows

$SPLUNK_DB/hot/index1/db
$SPLUNK_DB/cold/index1/db

Where can i see the cold and hot bucket logs?

[MuS · Accepted solution]

Hi pavanae,

again docs to the rescue; it is set in splunk-launch.conf http://docs.splunk.com/Documentation/Splunk/latest/Admin/Splunk-launchconf

cheers, MuS

[pavanae]

Just a small Clarification so SPLUNK_DB is actually the path in the splunk server or some outside path?

[J0hnWebster]

Which server is splunk-launch.conf found on?
It would be helpful to note on ALL questions regarding file locations, which functional node they're on.
Thanks.

[MuS]

This file is used on all Splunk instances, even universal forwarders, and is found in $SPLUNK_HOME/etc on *nix or $SPLUNK_HOME/etc on *win

cheers, MuS

[samhodgson]

What if you have a distributed environment? your indexes are not stored on the local filesystem. Do I need to have $SPLUNK_DB set on my searchhead?

[nickhills]

Indexes are always stored on a local filesystem.
Even if that filesystem is mounted from elsewhere, Splunk treats it as local (Don't do this btw!)
Its the same as @MuS mentioned on UFs, HFs, SHs and even distributed indexers.

[MuS]

No, $SPLUNK_HOME is the path to Splunk. $SPLUNK_DB is the path to your indexes which can be stored outside of Splunk

[pavanae]

Thanks got it