Can I use the same SPLUNK_DB directory for all 2 indexers and a search head?



I am going to set up Indexer clustering in Splunk, where I will user 2 indexer server, 1 search head, and a Splunk license manager.

Can I use the same Splunk_DB directory for all these Splunk servers?


Labels (2)
0 Karma

Splunk Employee
Splunk Employee

@shahk - Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment. Don’t forget to upvote anything that was helpful too. Thanks!

0 Karma


You can use the same path on each of your servers provided they have independent underlying storage, but you can't put SPLUNK_DB on shared storage and allow all of the servers to use it. They each need their own directory.

0 Karma


For indexer peers / index cluster members you will need to use a common Splunk DB location as the peers have identical configuration in terms of what is pushed from the cluster master server.

In other words the master-apps directory from the master becomes the slave-apps directory on each indexer...

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...