Splunk Enterprise

Unable to create new indexes directly on Splunk Web(UI) after adding Smartstore Indexes. "New Index" Button Disabled?

sushainmagotra1
Observer

Hello,

I recently migrated few of my Indexes to Smartstore Indexes using Azure. After the migration, now when I go to the Indexes page on my Splunk Web UI, the "New Index" button is disabled and it says "Disabled new index for Smart store Indexes".

Does this mean I cannot create any new Splunk Indexes via Splunk Web directly now, or is it a bug? How can I re-enable the "New Index" button now?

(I am using Splunk Enterprise verson 9.0.1 and a single instance)

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

my expectation is that as you cannot add needed information to use S2 with GUI it has disabled for that reason. You must add indexes by conf files after you have enabled S2.

That is told on https://docs.splunk.com/Documentation/Splunk/9.0.1/Indexer/AddSmartStoreindextocluster

r. Ismo

0 Karma

sushainmagotra1
Observer

Hi  r.Ismo,

Thanks for your reply. But what if I want to add a non smart store index ( a normal splunk index). For that also now I have to use indexes.conf every time?

So that means once Smart store is activated for even one index, we cannot add even non smart store indexes through GUI?

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Exactly that way.
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...