Is thawedPath in indexes.conf recommended?

[sympatiko]

Hi Splunkers,

I just want to ask if it is required in indexes.conf to specify the thawedPath?

Thanks,
Eddel

[Sourabhv05 · Accepted solution]

yes its mandatory.

[sympatiko]

Thank u bro!

Can you give some explanation. Explanation based on experience not just giving the splunk doc links 😃 .

[ppablo]

Hi @sympatiko

I tried searching through all Splunk Answers and couldn't find a detailed explanation for this. I know you didn't want to just hear something from the documentation, but it does explicitly say "Required. Splunk will not start if an index lacks a valid thawedPath." So it doesn't seem like there's any ifs ands or buts with this setting. If I hear a more in depth explanation as to why it's required, I'll post an update here.

[sympatiko]

Thanks for the info bro! I'm still exploring splunk. Have a great day!

[lmyrefelt]

set it and forget it 😉