@splunkkrishdee - Short answer, the index you create on the Cluster Master only stays on the Indexers. PS Recommendation - You need to deploy the same indexes.conf file on the Search Head to make sure you see the indexes listed on all the places of UI. (Forward the data from the SH to Indexers as per recommendation - https://docs.splunk.com/Documentation/Splunk/9.0.2/DistSearch/Forwardsearchheaddata ) (Indexes.conf on the SH will just be used to list the indexes on UI page) I hope this helps!!!
... View more