on a searchhead users with new roles can not see data from the indexer

[imrago]

Hi,

I encountered a strange problem, starting from few days ago, newly created roles on the searchhead are unable to access indexes on the indexer only the local are visible. Roles created earlier are working as expected.
In the logs I could not find any hint on the source of the problem.

How could I find the source of this problem?

[Damien_Dallimor · Accepted solution]

What method are you using to distribute the knowledge bundle to your indexer ?
For example, if you are using mounted knowledge bundles you will need to copy the etc/system/local/authorize.conf file to your knowledge bundle mount for your indexer to pick up.

[imrago]

Thank you for the clue, after the update to 4.2.4 the bundles on the indexer stopped being refreshed.

[imrago]

I am not using mounted knowledge bundle, I assume that knowledge bundle is sent on every distributed search query.
Could it be that my knowledge bundle is to large? Are there limitations on that?