Splunk Search

What is the difference between System and Search within indexes?

shawno
New Member
Name                       Actions                         App                                   Current Size
                                                             System
                                                             Search

What is the difference between System and Search under APP within the Indexes

Tags (2)
0 Karma

micahkemp
Champion

That just indicates which app (basically which folder under $SPLUNK_HOME) those indexes are defined.

If they are under etc/system they will show as belong to the System app. If they are under etc/apps/search, they will show up as the Search app.

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...