https://community.splunk.com/t5/Getting-Data-In/Getting-error-related-Fishbucket-in-internal-logs/m-p/473843#M81363 <P>Hi shrinkhalarana, I believe this error can be related with bucket issue, you can try to repair the bucket using this command for single bucket.</P> <P>the splunk service on indexer have to be stopped in order to repair a bucket.</P> <P>run splunk rebuild </P> <P>for further information check this document<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Bucketissues#Rebuild_a_single_bucket">https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Bucketissues#Rebuild_a_single_bucket</A></P> Thu, 31 Oct 2019 22:54:16 GMT ivanreis 2019-10-31T22:54:16Z https://community.splunk.com/t5/Getting-Data-In/Getting-error-related-Fishbucket-in-internal-logs/m-p/473842#M81362 <P>Receiving following error on searchead for forwarder:</P> <P>checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty</P> Wed, 30 Sep 2020 02:48:09 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-error-related-Fishbucket-in-internal-logs/m-p/473842#M81362 shrinkhalarana 2020-09-30T02:48:09Z https://community.splunk.com/t5/Getting-Data-In/Getting-error-related-Fishbucket-in-internal-logs/m-p/473843#M81363 <P>Hi shrinkhalarana, I believe this error can be related with bucket issue, you can try to repair the bucket using this command for single bucket.</P> <P>the splunk service on indexer have to be stopped in order to repair a bucket.</P> <P>run splunk rebuild </P> <P>for further information check this document<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Bucketissues#Rebuild_a_single_bucket">https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Bucketissues#Rebuild_a_single_bucket</A></P> Thu, 31 Oct 2019 22:54:16 GMT https://community.splunk.com/t5/Getting-Data-In/Getting-error-related-Fishbucket-in-internal-logs/m-p/473843#M81363 ivanreis 2019-10-31T22:54:16Z