Hi all,
My current setup consists of
1 x Search Head
3 x Indexers
1 x Cluster Master
1 x DS
1 x Test Forwarder
I created a new index via an indexes.conf file in the cluster master master_apps/_cluster/local/ directory
Pushed that bundle to the indexers and saw the new indexes get created
Forwarded an app on the test instance to the new index and saw the folder get populated with data under the Indexers:$SPLUNK_DB/{test_index}
Now when I run a search in my search head for the new index, it doesn't appear. Nor does it appear under the indexes menu.
Searching only for the host or the index does not return anything.
I can search for the default indexes such as "_internal" and then my test instance will show up.
Am I missing a setting somewhere to complete the setup for the search head to search through all indexes?
They are all currently connected to a license master with a valid license
Thanks for any help
↧