I prepared one lab with below instance to see real-time Single Site Index Clustering. But after configure I can only see _audit and _internal indexes from Cluster Master. Where are the rest of default indexes like main and etc?
1 Search Head with Deployment Server and License Master
1 Cluster Master
2 Indexer for Cluster Peer
I reviewed this question from https://answers.splunk.com/answers/143987/cluster-master-does-not-display-custom-or-main-index-only-... .
Note that, all the configuration is been done from CLI command not from apps.
Can anyone suggest me what can be a reason.
until you don't have acquired logs in an Index, you don't see it in Master Node dashboards.
I tried today for additional index creation from master-app but it is not reflecting at cluster peer indexes. Although, configuration pushed and i can able to see at slave-apps. Any idea, what I am missing ?
which path you are refereeing ?
coldPath = $SPLUNK_DB/test/colddb
enableDataIntegrityControl = 0
enableTsidxReduction = 0
homePath = $SPLUNK_DB/test/db
maxTotalDataSizeMB = 500
coldToFrozenDir = /opt/frozen/test
thawedPath = $SPLUNK_DB/test/thaweddb
maxDataSize = 200
repFactor = auto
correct me if I'm wrong:
can you share a screenshot of Master Node Index Replication dashboard?
The index will not appear in the cluster master until it contains data as per Giuseppe previous post.