How do I take a Splunk Index (IndxA.aws.gov) out of a cluster during a maintenance to avoid data loss? Thx a million

[SamHTexas]

There is a maintenance being performed & we are told that an Index (part of a cluster) is going to be moved to a new host & data loss may occur. How can we take this index out of a cluster so we won't  face data loss please? Thank u very much in advance.

[SamHTexas]

Indexer sir. Thank you for your help in advance.

[isoutamo]

I think that I already answer this on your another question/thread?

[isoutamo]

Are you talking about index or indexer?

[PickleRick]

What do you mean? In a clustered environment index is not stored on a single host. That's one. And if you "took the index out of a cluster" where would your forwarders write to? That's two.