Splunk Dev

Search app and default indexes

mlwelch
New Member

After configuring my search heads and peers to use the mounted bundle, the default search dashboard no longer includes the default indexes I gave the role access to. Is it expected that this will take a while to generate?

Tags (1)
0 Karma
1 Solution

Paolo_Prigione
Builder

I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as authorize.conf reside in etc/system/local instead of etc/apps and are therefore not shared between search heads. You might have to configure both search heads independently in that case.

View solution in original post

0 Karma

Paolo_Prigione
Builder

I suppose you are using Search Head Pooling as well. In that case, it is possible the user and role configuration files such as authorize.conf reside in etc/system/local instead of etc/apps and are therefore not shared between search heads. You might have to configure both search heads independently in that case.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...