In clustered Splunk folder names in thaweddb folder should match db_<newest_time><oldest_time>_<bucketid>_<guid> naming convention. Also you can restore data from another indexer, just change the GUID to local (find in etc/instance.cfg). Please note that rb_ prefix should also be renamed to db_ ... View more