Deployment Architecture

where these custom indexes are getting stored on indexer server?

vowner
Engager

I have created indexes using splunk web. can anyone tell where these custom indexes are getting stored on indexer server?

Tags (1)
0 Karma

renjith_nair
Legend

Hi @vowner,

The index data files are stored under your SPLUNK_DIR/var/lib/splunk

Index configuration files are stored based on the app context. If you were creating it from Search app, then it should be in etc/apps/search/local/indexes.conf

Another easiest way to find all information is running the btool

splunk cmd btool indexes list --debug
---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

renjith_nair
Legend

Hi @vowner,
Did this work for you?

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

New Dates, New City: Save the Date for .conf25!

Wake up, babe! New .conf25 dates AND location just dropped!! That's right, this year, .conf25 is taking place ...

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...