Is there a way to check the internal logs that a frozen index has been thawed on version 4.1.8?
I check the docs and I used the command they give to thaw an index:
./bin/splunk _internal call /data/indexes/main/rebuild-metadata-and-manifests
But it doesn't look like anything's imported. I am doing this on the 2 indexers and not the forwarder, will that make a difference?
Have you tried the following
| dbinspect index=
The vary last column called state should display the index status
View solution in original post