You might need to create indexes.conf and configure under your apps default folder manually.
You might need to create indexes.conf and configure under your apps default folder manually.
Does it need some kind of a restart, to reflect on the splunk web?
Do I have to make any changes to the index files?
Yes it would require Splunk restart.
What do you mean by changes to index files?
How should I restart?
Yes, I mean changes to index files?
Settings > Server Controls > Restart Splunk
Thank you so much... It worked, the change reflected.. 🙂
What you mean when you say your want to map the index with the app? You want to make the index only accessible from the app?
No.. I want the app to use this index instead of default index and when I go to the splunk web-> index name, I want to see this app name instead of "system". Basically, I want the app to populate data from this index.