I took over to Enterprise environment awhile back that is installed on Windows server 2012r2. We are currently running version 7.3. Indexers are setup as a multisite index cluster. With four indexers in the primary site, and a fourth one at our site 2.
We have a requirement to move default Splunk indexes and custom event indexes to new drives installed on the index servers.
We are attempting to utilize two new volume paths parameters in our index.conf. One for hot/warm and 2nd one for cold.
New volumes index.conf is setup in one new app defined in the master node master/new volume app name/
Indexes are setup in another new app defined in the master node master/new index.config app name.
Bundle push was successful when looking at the peers slave-apps directory, but indexes are not populated on the new disk drives.
Splunk software was installed as local system, but later is was switch over to run as a different user.
New user has read/write to the new disk drives.
Documentation is little confusing, and it references a install on Linux more then windows
How do I get the default location of indexes to migrate to new windows disk?
