Where is tsidx created?

[rroberts]

If I run :

1.index=_* | fields action | tscollect namespace=myaction ...(creates tsidx file)

2.The myaction namespace will be created under $SPLUNK_HOME/var/lib/splunk/tsidxstats/myaction

3.| tstats count from myaction groupby action ...(read tsidx file)

However, if I don't use a namespace value where does the tsidx get created?

[rroberts · Accepted solution]

Found it looks like it will be created under :

/opt/home/rick/splunk/var/run/splunk/dispatch/1380485760.325/tsidxstats