Security

Creating new role and can't see indexes

sreynolds30
Explorer

So I'm creating a new role on my SH version 6 and on this role it can't see indexes on my indexer. I can only see the internal index on the SH. So I can't tie down this role.

Now i can do searches and data from the indexes on my indexer just find.

any thoughts?

Tags (1)
0 Karma

dshpritz
SplunkTrust
SplunkTrust

You will also need to create the indexes on your SH for the indexes to populate in the GUI.

0 Karma

sreynolds30
Explorer

So I'm trying to find the release notes that this issue has been fixed in 6.0.2 before doing the rpm upgrade. Not having luck does anyone have a link to this being fixed in 6.0.2? thanks.

0 Karma

sreynolds30
Explorer

thanks for the replies. I will upgrade to 6.0.2 we just put 6.0.1 on the other day. 🙂

0 Karma

yannK
Splunk Employee
Splunk Employee

the fact that you do not see the indexes is :
- on old versions (4.*)
- on 6.0. because of a bug in 6.0 and 6.0.1
fixed in 6.0.2, please upgrade

OR define the indexes on the search-head to have the list populated.

somesoni2
Revered Legend

You'll face the same issue if you're adding summary indexing. A local version of indexes (with same as in the Indexer) for these indexes to be available from search head.

0 Karma

lguinn2
Legend

This has not been my experience. If I create a index on the indexers, I can see it on the search head - without defining anything on the search head at all.

Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...