I was intending to moving my colddb and thaweddb indexes over and I mixed up the parent folder.
So I ended up moving the folder with all my hot db, while the splunk service was still running.
When I had realized my folly, I decided to move the hot db in their original location, but the service had already recreated db folder and certain config files:
I decided to merge the db folders together, but certain files I chose to not overwrite
Hosts.data
Sources.data
SourceTypes.data
.bucketManifest
.metaManifest
But I fear that certain hot db files may longer be referenced in the newly created config files.
The entire splunk index is striped across 3 indexes so I'm not sure if automatically repairs inconsistencies in the indexes. How can I check if I successfully merged the 2 "hot" db folders back together?
... View more