<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Failed to make bucket error in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232603#M8690</link>
    <description>&lt;P&gt;For Bucket_ID I use : &lt;CODE&gt;_internal~179~5EDAD0F8-8979-415D-BBB0-72E968D15EF8&lt;/CODE&gt; ?&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 07:19:39 GMT</pubDate>
    <dc:creator>DavidHourani</dc:creator>
    <dc:date>2020-09-29T07:19:39Z</dc:date>
    <item>
      <title>Failed to make bucket error</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232601#M8688</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I have a cluster of indexers and a couple of SH to run my searches and recently i've been getting the following error from the SH:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Search peer INDEXER1 has the following message: Failed to make bucket = _internal~179~5EDAD0F8-8979-415D-BBB0-72E968D15EF8 searchable, retry count = 104.
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Any idea how I can get rid of that ? I've tried deleting the bucket but nothing happens.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
David&lt;/P&gt;</description>
      <pubDate>Tue, 22 Sep 2015 09:12:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232601#M8688</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2015-09-22T09:12:22Z</dc:date>
    </item>
    <item>
      <title>Re: Failed to make bucket error</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232602#M8689</link>
      <description>&lt;P&gt;You can remove the bucket by hitting the bucket's remove_all endpoint on the master.&lt;/P&gt;

&lt;P&gt;curl -k -u USER:LOGIN (https://) master_uri:mgmt_port/services/cluster/master/buckets/BUCKET_ID/remove_all -X POST&lt;/P&gt;

&lt;P&gt;Otherwise if you're on 5.0.x, I'd freeze the bucket and it should leave you alone.&lt;/P&gt;

&lt;P&gt;curl -k -u USER:LOGIN (https://) master_uri:mgmt_port/services/cluster/master/buckets/BUCKET_ID/freeze -X POST&lt;/P&gt;

&lt;P&gt;&lt;A href="http://www.softwaretestingtraining.in/" target="_blank"&gt;Software Testing Training in Chennai&lt;BR /&gt;
&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 07:21:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232602#M8689</guid>
      <dc:creator>dwarak</dc:creator>
      <dc:date>2020-09-29T07:21:19Z</dc:date>
    </item>
    <item>
      <title>Re: Failed to make bucket error</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232603#M8690</link>
      <description>&lt;P&gt;For Bucket_ID I use : &lt;CODE&gt;_internal~179~5EDAD0F8-8979-415D-BBB0-72E968D15EF8&lt;/CODE&gt; ?&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 07:19:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232603#M8690</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2020-09-29T07:19:39Z</dc:date>
    </item>
    <item>
      <title>Re: Failed to make bucket error</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232604#M8691</link>
      <description>&lt;P&gt;What output should i get ? &lt;/P&gt;</description>
      <pubDate>Thu, 24 Sep 2015 15:49:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Failed-to-make-bucket-error/m-p/232604#M8691</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2015-09-24T15:49:54Z</dc:date>
    </item>
  </channel>
</rss>

