How to create index using REST API in a index clustered environment?

[Decoder79]

HI All,

I have a question, How to create index using REST API in a index clustered environment?

Version : Splunk Enterprise 8.x

[isoutamo]

Hi

based on documentation this post is still valid: https://community.splunk.com/t5/Getting-Data-In/How-to-create-index-using-REST-API-in-a-clustered-en...

You can create index on single peer, but not on cluster via rest.

You can add idea for this to ideas.splunk.com and hope that this will get enough votes to be a consider new feature.

r. Ismo

r. Ismo

[PickleRick]

Due to the way the cluster works I'd suppose it's not that easy and not really feasible to implement.

Since cluster configuration is maintained by confiugration bundles pushed from the master node, the REST would have to be implemented against master. And it would have to involve all that is "included" in preparing the bundle, verifying it, pushing and so on... Way too much fuss IMHO.