Getting Data In

Clustered indexes not showing up in the index list.

some_guy
Path Finder

Hello. Splunk 6.2.1. Built a single-site index cluster. Two search heads. I can create test indexes across the cluster by editing indexes.conf on the cluster-master, then deploying a config bundle. Works great.

Problem: My search heads don't see the test indexes in an index list. In splunkweb, Settings->Indexer Clustering, I've configured the master as a searched cluster, and everything is up/searchable/met. Still, my new test indices only show up on the master and the indexers themselves.

Any help appreciated. Thanks.

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Do you have any data in the indexes? New indexes only show up in the Indexes tab of the Master Dashboard once they have data in them. See the "note" here: http://docs.splunk.com/Documentation/Splunk/6.2.1/Indexer/Howtomonitoracluster#Indexes_tab

View solution in original post

Michael
Contributor

An addendum to this question, what indexes should be visible on the Indexer Clustering dashboard?

I have dozens of active indexes in my cluster (yes, with data and my role does have access), but this management console only shows:
_audit
_internal
_telemetry
main
summary

Should all my indices be reflected here, or am I not understanding what this is supposed to be reflecting? Documentation is not clear on this part...

thanks!
Mike

0 Karma

Steve_G_
Splunk Employee
Splunk Employee

Do you have any data in the indexes? New indexes only show up in the Indexes tab of the Master Dashboard once they have data in them. See the "note" here: http://docs.splunk.com/Documentation/Splunk/6.2.1/Indexer/Howtomonitoracluster#Indexes_tab

View solution in original post

some_guy
Path Finder

These indexes are indeed empty. That must be it. Thanks!

(my test indices do show up when editing a role...ie: "Indexes searched by default" )

0 Karma

athorat3
New Member

@Steve G.

I have a similar issue where I do not see all the indexes under "All Index" button under >> Data Rebalance

https://answers.splunk.com/answers/577726/issues-with-data-rebalance-from-clustermaster.html?minQues...

Any inputs?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!