Currently being hosted on Win2012 R2.
Splunk is installed on C:\ and E:\, with splunk-launch.conf pointing to E:..
However once I complete the upgrade, the indexes disappear from the Webpage Splunk > Settings > Indexes but the search is still working.
I can create a new index which ends up in E:\ but after creation it doesn't appear within Settings > Indexes.
Error:
Installed Files Integrity Checker: Unable to access or parse the contents of manifest file in SPLUNK_HOME directory. As a result, file integrity information is not available. Verify manifest file in SPLUNK_HOME directory is still present, and that the splunk service user context will have read-access.
Confirmed using same account which originally installed Splunk v6.6.2
Are you on a distributed env?
Can you check the value of $SPLUNK_HOME?
It's pointing to E:\Splunk\index
And the indexes are E:\Splunk\index\var\lib\splunk
can you elaborate?
what does it mean splunk installed on C:\ and E:\?
where are the splunk binaries?
can you share your full splunk-launch.conf
including:
SPLUNK_HOME
SPLUNK_DB
when you are running the command | dbinspect
or | rest /services/data/indexes | table title homePath_expanded coldPath_expanded
what are the results?