Cluster Index Manager for Splunk

This app helps to create Splunk cluster indexes stanzas in $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf file. App will use existing file or create new if it does not exist. Values that will be saved to file: [INDEX_NAME] homePath = $SPLUNK_DB/INDEX_NAME_LOWERCASE/db coldPath = $SPLUNK_DB/INDEX_NAME_LOWERCASE/colddb thawedPath = $SPLUNK_DB/INDEX_NAME_LOWERCASE/thaweddb maxTotalDataSizeMB = INDEX_SIZE_IN_MB frozenTimePeriodInSecs = INDEX_LIFETIME_IN_SECONDS enableTsidxReduction = true (Optional) timePeriodInSecBeforeTsidxReduction = INDEX_REDUCTION_TIME_IN_SECONDS (Optional) repFactor = auto Install app on Master node which have rights to deploy configuration to other peers. If you need to modify or delete index configuration then do it manually in $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf file.