Hi Team,
I have below machines on AWS running currently in non-cluster mode. I am able to send data to the main index but not able to send data to any newly created index. Please help.
1) Search Head
2) Indexer1
3) Indexer2
4)Forwarder 1
5) Forwarder 2
Much appreciated for your time and inputs!
Regards
smdasim
Solution :Create indexes and give user roles on search head and indexers as shown below
https://developers.perfectomobile.com/display/TT/Splunk+-+Creating+your+Index