My cluster master is not listing the indexes that are being shared by the peers, if I run a search
indexes=* | stats count by index
I am getting results but I am not able to see the same in settings -> Data -> Indexes
I have tried it in search head also no luck even there.
Hi @kunalwalmart,
Indexes which are avilable on Indexers are not visible in settings -> Data -> Indexes
on Cluster Master and SH because these indexes are actually not present on CM and SH.
To check indexes which are available on your indexer cluster and those indexes hold some data, those are available on CM in Settings -> Indexer Clusterting
.
I hope this helps.
Thanks,
Harshil
Hi @kunalwalmart,
Indexes which are avilable on Indexers are not visible in settings -> Data -> Indexes
on Cluster Master and SH because these indexes are actually not present on CM and SH.
To check indexes which are available on your indexer cluster and those indexes hold some data, those are available on CM in Settings -> Indexer Clusterting
.
I hope this helps.
Thanks,
Harshil
So for any changes in the indexes I need to go and do them in config files ?
Yes, when you want to change any index config on Indexer which are in Indexer Cluster, you need to change config files in $SPLUNK_HOME/etc/masterapps/<your app>/local/indexes.conf
on Cluster Master and then you need to push bundle from Cluster Master to Indexer.