Getting Data In

Problem parsing indexes.conf: Cannot load IndexConfig: ...

Robbie1194
Communicator

Hi guys,

I'm new to dealing with .conf files so I'm having a practice on my own home splunk instance. My goal is to try and create an index named "lapd" from indexes.conf and then upload a datafile to this index via inputs.conf

I've made an app named Dataload and I am storing all the config in the local folder of this app

my indexes.conf file is:

[volume:primary]
path = /Applications/Splunk/

[LAPD]
homePath = volume:primary/defaultdb/db
coldPath = volume:primary/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb

When I try and start splunk I get this error message:

Problem parsing indexes.conf: Cannot load IndexConfig: index=main Path=/Applications/Splunk/var/lib/splunk/defaultdb/db given as value of param=homePath collides with value of param2=homePath of index2=lapd.
Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

Does anyone have any idea why this might be? Any help would be appreciated.

Thanks 🙂

0 Karma
1 Solution

bheemireddi
Communicator

You have used the path for the main (default) index for the LAPD index.

It should be like this
[LAPD]
homePath = volume:primary/LAPD/db
coldPath = volume:primary/LAPD/colddb
thawedPath = $SPLUNK_DB/LAPD/thaweddb

View solution in original post

0 Karma

bheemireddi
Communicator

You have used the path for the main (default) index for the LAPD index.

It should be like this
[LAPD]
homePath = volume:primary/LAPD/db
coldPath = volume:primary/LAPD/colddb
thawedPath = $SPLUNK_DB/LAPD/thaweddb

View solution in original post

0 Karma

burwell
SplunkTrust
SplunkTrust

The interesting thing is that btool check does not detect this collision.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Exactly.
For completeness, this is the definition for the main index (from $SPLUNK_HOME/etc/system/default/indexes.conf)

[main]
homePath   = $SPLUNK_DB/defaultdb/db
coldPath   = $SPLUNK_DB/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb

Hence the path collision, since you cannot use the same path for two different indices.

0 Karma

Robbie1194
Communicator

Thanks guys that was exactly it!

Got my inputs.conf working too!

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.