Indexing: Indexes and volumes dashboards
This topic is a reference for all of the Indexing: Indexes and volumes dashboards in the distributed management console. See “About the distributed management console.”
What do these views show?
The indexes and volume dashboards consist of six individual dashboards about indexing, each consisting of several panels.
Altogether the indexes and volumes dashboards describe how disk is being used on your indexes. These views break down the data presented in the resource usage views.
Interpret results in these views
If your system is tight on storage, visit the indexes and volumes dashboards. Use this data to help you evaluate and revise your retention policy. See "How the indexer stores indexes" in Managing Indexers and Clusters of Indexers.
What to look for in these views
In the Indexes and Volumes: Instance dashboard, instances highlighted in blue are rolling buckets to frozen. See "How the indexer stores indexes" in Managing Indexers and Clusters of Indexers.
In the Indexes and Volumes: Deployment dashboard, information about data that is being frozen can be a red flag. The Indexes and Volumes panels display this information.
In the Index Detail: Deployment dashboard, check the Instances panel for indexers with Data Age vs. Frozen Age where the data is being frozen well before their age limit. Drilldowns in the dashboard help you investigate.
Indexer clustering: Service activity
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11