Changing Content of the Default Subclient

By default, the default subclient has all the indexes in the Splunk Clustered Environment.

You can change the content of the default subclient by selecting individual indexes for backup.


  1. From the navigation pane, click Protect > Big data.

    The Instances page appears.

  2. Click an instance name.

    The selected instance page appears.

  3. In the Subclients section, click default.

    The default page appears.

  4. On the Configuration tab, in the Content section, click Edit.

    The Edit content dialog box appears.

  5. Click Browse.

    The Browse content dialog box appears.

  6. From the Indexes list, select the individual indexes that you want to add to the content of the default subclient, and then click OK.
  7. Click Save.


The selected indexes are added to the content of the default subclient.

Last modified: 3/10/2021 9:28:41 PM