Deployment Architecture

Why is the cluster master of a multisite indexer cluster not showing new indexes I created and deployed to the peers?

jbresciani
New Member

I am setting up a multisite cluster with 2 indexers and 1 sh in each site, 2 sites (for now). I've created 2 extra indexes in $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf and successfully deployed them to the peers. When on the peers I can see the config in slave-apps and the new folders under $SPLUNK_db/, but on the cluster master at the end point /en-US/manager/system/clustering?tab=indexes, I only see the indexes _audit and _internal.

What did I miss?

I deployed by hand editing the indexes.conf file on the master and then hitting deploy from the web ui on the master.

0 Karma

mahamed_splunk
Splunk Employee
Splunk Employee

Do you have any data in the newly created indexes ? Cluster master will track the indexes once it has the data. Forward some data to it then you will see it in the master dashboards.

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...