Splunk Dev

Search app and default indexes

mlwelch
New Member

After configuring my search heads and peers to use the mounted bundle, the default search dashboard no longer includes the default indexes I gave the role access to. Is it expected that this will take a while to generate?

Tags (1)
0 Karma
1 Solution

Paolo_Prigione
Builder

I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as authorize.conf reside in etc/system/local instead of etc/apps and are therefore not shared between search heads. You might have to configure both search heads independently in that case.

View solution in original post

0 Karma

Paolo_Prigione
Builder

I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as authorize.conf reside in etc/system/local instead of etc/apps and are therefore not shared between search heads. You might have to configure both search heads independently in that case.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...