splunk 6.4.1 cluster - move defaultdb/main to new location via indexes.conf

[bryanwiggins]

env:
IDX multi-site cluster (1 master, 3 peers)
2x HF's
2x SH's

I am wanting to move the defaultdb/main index to a bigger disk and I am hoping I can do this via an entry in indexes.conf and pushing via a bundle to the peers.

Is it as straight forward as adding the following to /opt/splunk/etc/master-apps/_cluster/local/indexes.conf (as I do for other indexes I have created)

[main]
repFactor=auto
homePath=/path/to/new/location/db
coldPath=/path/to/new/location/colddb
thawedPath=/path/to/new/location/thaweddb

Then run 'splunk apply cluster-bundle'

Do i have to do anything or will this in effect move the defaultdb/main index to the new path I have already created?

Thx
Bry

[bryanwiggins]

Update:

This worked - I added the path in the indexes.conf listed above, applied the bundle and data started flowing to the new path - all paths updated too.

I did create the directory structure first before applying the bundle to the idx peers.

Thx
Bry

[bryanwiggins · Accepted solution]

Update:

This worked - I added the path in the indexes.conf listed above, applied the bundle and data started flowing to the new path - all paths updated too.

I did create the directory structure first before applying the bundle to the idx peers.

Thx
Bry