Getting Data In

Creating index centrally

echalex
Builder

Hi,

Is there any way of creating indexes on several indexers centrally? For a fairly small indexer-farm, it isn't much hassle to do it manually, but for several servers, it might be easier and more resistant to human error to do it centrally.

Tags (2)
0 Karma
1 Solution

BobM
Builder

I would recommend you look at deployment server. You can set one server to be master. Put the indexes.conf into an app called "indexer" set it to deploy the app whenever you add new indexes.

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Aboutdeploymentserver

View solution in original post

BobM
Builder

I would recommend you look at deployment server. You can set one server to be master. Put the indexes.conf into an app called "indexer" set it to deploy the app whenever you add new indexes.

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Aboutdeploymentserver

echalex
Builder

Thanks! I do have a deployment set up, so that seems like a plausible solution. I thought about this, but I haven't found any mention of it, so I wanted to ask first.

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...