Scribd Logo
Upload

Welcome to Scribd!

  • Use Case-2 - Troubleshooting

    Uploaded by

    junaid
    9 views7 pages
    The document discusses an issue where data is being indexed to the default index instead of a custom index. The root cause is that the index definition is not present in the cluster. The solution is to add the index name definition to the cluster manager's indexes.conf file, deploy the bundle to peers, and check that the index name change is reflected on each indexer.

    Original Description:

    Original Title

    Use case-2 - Troubleshooting

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document discusses an issue where data is being indexed to the default index instead of a custom index. The root cause is that the index definition is not present in the cluster. The solution is to add the index name definition to the cluster manager's indexes.conf file, deploy the bundle to peers, and check that the index name change is reflected on each indexer.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    9 views7 pages

    Use Case-2 - Troubleshooting

    Uploaded by

    junaid
    The document discusses an issue where data is being indexed to the default index instead of a custom index. The root cause is that the index definition is not present in the cluster. The solution is to add the index name definition to the cluster manager's indexes.conf file, deploy the bundle to peers, and check that the index name change is reflected on each indexer.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 7

    Splunk Enterprise

    Troubleshooting
    Use Cases

    2
    Soft Mania

    Data Replication Issues


    Issue-2:
    Data is getting indexed to default index,
    instead of custom index

    @SoftMania #SoftMania
    Soft Mania

    Data Replication Issues


    Root Cause:
    Index (web_idx) definition is not
    present in the Cluster

    @SoftMania #SoftMania
    Soft Mania

    Data Replication Issues


    Solution:
    Add the index name definition in the
    Cluster Manager & deploy the bundle
    (or)
    Change the index name in inputs.conf
    for the respective sources.
    Step-1:
    In Cluster Manager node, edit the “indexes.conf” file

    @SoftMania #SoftMania
    Soft Mania

    Data Replication Issues


    Step-2:
    Add the stanza as shown below.

    @SoftMania #SoftMania
    Soft Mania

    Data Replication Issues


    Step-3: Deploy the bundle to Peers using CLI or GUI

    Step-4: Check the index name on each indexer to


    make sure changes are reflecting.

    @SoftMania #SoftMania

    You might also like