How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

kandersen — Mon, 23 Jul 2018 11:31:16 GMT

I only get information about the first 31 buckets with the rest api:
https://localhost:8089/services/cluster/master/buckets
But we have a lot more buckets.
It's Splunk Enterprise V6.5.2

What can I do to get the information about all buckets, or is there a bug in this rest call?

Re: How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

PowerPacked — Tue, 29 Sep 2020 20:35:27 GMT

You can also find information regarding the Buckets in introspection index.

try this search and replace index in data.name=_internal with your index

index="_introspection" sourcetype="splunk_disk_objects" component=indexes data.name=_internal

you will find info like bucket count, event count, size, for all hot/warm, cold, thawed for the index & all the indexes.

Thanks