Hi,
I removed several indexes from indexes.conf and after the apply, I found that the number of indexes are not the same :
In the monitoring console, in "Indexes an Volumes: Instance" tab, I found another number :
When I run |rest /services/data/indexes and filter on indexes, the count is 376.
Can you explain me why and how to get the same number every place ?
@mah , Cluster Master does not show empty indexes on the list. Can you check if missing indexes has any data?
https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Howtomonitoracluster#Indexes_tab
@mah , Cluster Master does not show empty indexes on the list. Can you check if missing indexes has any data?
https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Howtomonitoracluster#Indexes_tab
That's it ! I make a diff and 70 indexes are empty.
Thanks a lot !
On which instance(s) did you change indexes.conf? Did you restart Splunk after making the change?
I did the changes on deployment-server and cluster master.
On cluster master, I apply it on indexers (2 instances) with "splunk apply cluster-bundle" command.