Getting Data In

Index not created

lmjoin
Explorer

Hello Team,

I have created folder /opt/splunk/etc/master-apps/sita9 and put indexes.conf under it and push bundle by master. folder and indexes.conf are now present on peer. But index ( sita9) are not created /opt/splunk/var/lib/splunk/ ,i have restarted manually peer also.

[sita9]
homePath = $SPLUNK_DB/$_index_name/db
coldPath = $SPLUNK_DB/$_index_name/colddb
thawedPath = $SPLUNK_DB/$_index_name/thaweddb
repFactor = auto

Please help.

Thanks
Lalit

Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Did you enter the file path correctly in your question? It should be /opt/splunk/etc/master-apps/sita9/default.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Did you enter the file path correctly in your question? It should be /opt/splunk/etc/master-apps/sita9/default.

---
If this reply helps you, Karma would be appreciated.
0 Karma

lmjoin
Explorer

Thanks it is done , i have one more question , so we have to put props.conf and transforms.conf under /opt/splunk/etc/master-apps/sita9/default for routing or filter data.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes. All .conf files go in either 'default' or local.

If your problem is resolved, please accept the answer to help future readers.

---
If this reply helps you, Karma would be appreciated.
0 Karma