Splunk Dev

Why does my Splunk Service return an empty CollectionIndexes?

sung101
Engager

We have developed a Splunk client app using Splunk Java SDK.

A particular Splunk server installation has a few indexes with data stored in them. When getIndexes() is called in com.splunk.Service class object, it returns an empty CollectionIndexes. However, on the same Service object, we can search data in the indexes and it is certain that those indexes do exist.

IndexCollection indexCollection = service.getIndexes();
boolean indexNotFound = indexCollection.isEmpty();

I got the same results with Java SDK 1.5.0.0 and 1.6.5.0.

This is happening in a particular Splunk server installation. For other Splunk server installations, we do not have any issue. Under what condition could this issue happen? What can I do to troubleshoot?

Labels (1)

ssrrjj
Engager

Can someone help here!

0 Karma
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...