Splunk Enterprise

Monitoring Console [DMC] no longer working after moving the index database

unkvar
New Member

Hello all,

Recently I've had to move our current index DB to a new location to free up some storage space. I followed the documentation outlined in: https://docs.splunk.com/Documentation/Splunk/9.0.3/Indexer/Moveanindex and everything is working fine with exception of the built-in Monitoring Console app.

When loading up the resource usage web page for the instance it just appears empty. I tried to narrow down the searches itself and when running the search is just seems that all the dmc macros (dmc_*) aren't working, but if you run the conents of the macro instead of calling the macro it works as expected. Anyone knows why this is happening and the best way to go about fixing it?

After DB moveAfter DB move

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...