for an index, i specified the following:
[abc]
homePath = $SPLUNK_DB/abc/db
coldPath = $SPLUNK_DB/abc/colddb
thawedPath = $SPLUNK_DB/abc/thaweddb
since i used "$SPLUNK_DB" i don't see it in /var/lib/splunk , so can i please know where i could see those directories?
The SPLUNK_DB
environment variable is defaulted in the software as follows (from $SPLUNK_HOME/etc/splunk-launch.conf
😞
Therefore, your files should be found (if there are no splunk-launch.conf
files that modify the default) inside $SPLUNK_HOME/var/lib/splunk/
which for linux with a standard installation should be /opt/splunk/var/lib/splunk/
.
The SPLUNK_DB
environment variable is defaulted in the software as follows (from $SPLUNK_HOME/etc/splunk-launch.conf
😞
Therefore, your files should be found (if there are no splunk-launch.conf
files that modify the default) inside $SPLUNK_HOME/var/lib/splunk/
which for linux with a standard installation should be /opt/splunk/var/lib/splunk/
.
Did you check in $SPLUNK_HOME/var/lib/splunk ?