Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
3,000 results
Sort by:
02-03-2025
04:01 AM
Hi Splunkers, I have a very simple question. When I configure a Splunk indexes.conf, I know that one parameter I can configure is repFactor. In a scenario where SmartStore is used, we know that r...
Labels
- Labels:
-
administration
-
configuration
08-20-2024
02:50 PM
In Indexes.conf from the CM, I tried to set thawedHomePath to a volume, which I have since learned does not work. I set the path from volume:cold back to $SPLUNK_DB, but no matter what I do the i...
Labels
- Labels:
-
indexer clustering
-
Linux
06-19-2012
12:39 PM
3 Karma
Hi. I need to add some limits to retention in my indexes.conf file on several indexers.
The documentation suggests that the best place for the indexes.conf to reside is in $SPLUNK_HOME/etc/s...
- Tags:
- indexes.conf
06-07-2019
02:31 PM
Hi, I am currently setting up retention for an index, I want a retention period of 1 year where after that period the data will be deleted.
But worried about the data moving from hot/warm to cold...
08-13-2019
12:27 PM
1 Karma
Hey All,
I have a question surrounding the best way to deploy the indexes.conf in our environment.
We currently have our indexes.conf deployed to our indexers, heavy forwarders, and ES. We d...
04-30-2017
11:50 AM
This is my indexes.conf configuration
[volume:hot_warm]
path = /store/hot_warm
maxVolumeDataSizeMB = 1450000
[volume:cold]
path = /store/cold
maxVolumeDataSizeMB = 9400000
[pan]
h...
07-27-2017
12:27 PM
I have a volume defined:
[volume:hot]
path = /indexes/warm
maxVolumeDataSizeMB = 2097152
[test]
homePath=volume:hot/test/db
coldPath=volume:cold/test/colddb
thawedPath=/indexes/cold/t...
04-21-2022
09:10 AM
I use Splunk Enterprise 8.0.4.1
In indexes.conf I have changed maxTotalDataSizeMB value.
According to https://docs.splunk.com/Documentation/Splunk/8.0.4/Indexer/Determinerestart&n...
Labels
- Labels:
-
index
Show results in replies (3)
-
Hi at least in some cases when you are using some REST queries those didn't work correctly before ...
-
Thank you, the link you provided did the job. It's still not clear to me if this is needed because...
-
...o the indexes.conf is being picked up by the indexing part of the splunk daemon but since it's not b...
06-05-2018
05:12 AM
I have installed search head cluster and want pushing configuration by deployment server . But unable to find how to make and push indexes.conf to all indexers ( not in clustering ) . Thanks for r...
- Tags:
- splunk-enterprise
Labels
- Labels:
-
index
Show results in replies (9)
-
...hen create another app with a indexes.conf in it. Then create $SPLUNK_HOME/etc/system/local/s...
-
Yeah, exactly!
-
No, no, no. That command is for Deployer , not for Deployment Server . Just restart Splunk beca...
-
Hey there, The command : ./splunk apply shcluster-bundle -target https://IP:8089 -auth adm...
-
...onfigured deploymentclient.conf file in it onto each Indexer and restarted all Splunk instances after that.
-
Hello Woodcock, I have created $SPLUNK_HOME/etc/deployment-apps/newapp_indexer/local/indexes...
-
Hello Woodcock, Thanks for reply , please share doc or some things to create app for indexer ...
-
...089 -auth admin:Password But still not found no indexes.conf,props.conf and transforms.conf on i...
-
Hi Lalit, Make sure you add the metadata folder in your your app with a file called "default.met...
01-10-2023
12:28 AM
Hello Splunkers, For a specific index I configured repFactor = auto and I suppose that the logs are exactly the same on my two indexers for this specific index. How could I verify that all bu...
Labels
- Labels:
-
indexer
