Hi guys,
I'm new to dealing with .conf files so I'm having a practice on my own home splunk instance. My goal is to try and create an index named "lapd" from indexes.conf and then upload a datafile to this index via inputs.conf
I've made an app named Dataload and I am storing all the config in the local folder of this app
my indexes.conf file is:
[volume:primary]
path = /Applications/Splunk/
[LAPD]
homePath = volume:primary/defaultdb/db
coldPath = volume:primary/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
When I try and start splunk I get this error message:
Problem parsing indexes.conf: Cannot load IndexConfig: index=main Path=/Applications/Splunk/var/lib/splunk/defaultdb/db given as value of param=homePath collides with value of param2=homePath of index2=lapd.
Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue
Does anyone have any idea why this might be? Any help would be appreciated.
Thanks 🙂
You have used the path for the main (default) index for the LAPD index.
It should be like this
[LAPD]
homePath = volume:primary/LAPD/db
coldPath = volume:primary/LAPD/colddb
thawedPath = $SPLUNK_DB/LAPD/thaweddb
You have used the path for the main (default) index for the LAPD index.
It should be like this
[LAPD]
homePath = volume:primary/LAPD/db
coldPath = volume:primary/LAPD/colddb
thawedPath = $SPLUNK_DB/LAPD/thaweddb
The interesting thing is that btool check does not detect this collision.
Exactly.
For completeness, this is the definition for the main index (from $SPLUNK_HOME/etc/system/default/indexes.conf)
[main]
homePath = $SPLUNK_DB/defaultdb/db
coldPath = $SPLUNK_DB/defaultdb/colddb
thawedPath = $SPLUNK_DB/defaultdb/thaweddb
Hence the path collision, since you cannot use the same path for two different indices.
Thanks guys that was exactly it!
Got my inputs.conf working too!