I have the same problem, tried many debug commands and search hard here
But still can not find the answer
When run any search command on search bar then message shows
Said as you mentioned "[Indexer...] Could not find an index named "_blocksignature".
Did not find configuration file,etc/slaveapps/_cluster/default/indexes.conf
Only can find an conf file in etc/master-apps/_cluster/default/indexes.conf
indexes.conf contents are followings------
[main]
repFactor = auto
[history]
repFactor = auto
[summary]
repFactor = auto
[_internal]
repFactor = auto
[_audit]
repFactor = auto
[_thefishbucket]
repFactor = auto
[_telemetry]
homePath = $SPLUNK_DB/_telemetry/db
coldPath = $SPLUNK_DB/_telemetry/colddb
thawedPath = $SPLUNK_DB/_telemetry/thaweddb
repFactor = auto
this index has been removed in the 4.1 series, but this stanza must be
preserved to avoid displaying errors for users that have tweaked the index's
size/etc parameters in local/indexes.conf.
[splunklogger]
repFactor = auto
-----End of indexes.con
Any suggestion ?Thank you very much
... View more