How to Splunk index path change

[thkwon]

Hello 

I want to save hot/warm and cold separately when I make splunk index.

Hot/Warm is stored in /tmp/hotwarm and cold is stored in /tmp/cold path.

However, it is time to create an index in the Splunk UI.

I know to separate routes from indexes.conf. It's just that I want to save it in the UI as Default in the path I want to save.

What should I do?

Thanks

[manjunathmeti]

hi @thkwon,

You can provide the Home path and Cold path in the UI also.
If you don't provide paths, by default home path is set to $SPLUNK_DB/INDEX_NAME/db and cold path is set to $SPLUNK_DB/INDEX_NAME/colddb.
In the system, $SPLUNK_DB is set to $SPLUNK_HOME/var/lib/splunk.

You can override the new $SPLUNK_DB path/tmp/splunk in $SPLUNK_HOME/etc/splunk-launch.conf file.

SPLUNK_DB = /tmp/splunk

If this reply helps you, a like would be appreciated.