https://community.splunk.com/t5/Monitoring-Splunk/DBinspect-vs-rest-call/m-p/518365#M4441 <P>total number of buckets are depending on how many indexers you have and replication factor.</P><P>for example if you have 4 indexers, max total number of buckets would be 450*4.</P><P>I have run searches you have shared in my standard alone box. its giving exact same results.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dbinspect.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10704i48496F611D954278/image-size/large?v=v2&amp;px=999" role="button" title="dbinspect.png" alt="dbinspect.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rest.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10703i6ED818E75F655974/image-size/large?v=v2&amp;px=999" role="button" title="rest.png" alt="rest.png" /></span></P> Tue, 08 Sep 2020 06:52:41 GMT thambisetty 2020-09-08T06:52:41Z https://community.splunk.com/t5/Monitoring-Splunk/DBinspect-vs-rest-call/m-p/518254#M4438 <P>I am running 2 search:</P><P>&nbsp;</P><P>| rest splunk_server=* /services/data/indexes-extended | search title = _internal<BR />| stats max(bucket_dirs.home.warm_bucket_count) by title<BR /><BR />| dbinspect index=_internal | search state = warm | stats count<BR /><BR />Both are run for all time, why am i getting different count of warm data.<BR /><BR />Also, my max warm bucket count is restriceted to 450, while rest api call is giving me a no below this, dbinspect is giving me 2550. How is this possible.</P> Mon, 07 Sep 2020 14:33:08 GMT https://community.splunk.com/t5/Monitoring-Splunk/DBinspect-vs-rest-call/m-p/518254#M4438 kiamyash 2020-09-07T14:33:08Z https://community.splunk.com/t5/Monitoring-Splunk/DBinspect-vs-rest-call/m-p/518365#M4441 <P>total number of buckets are depending on how many indexers you have and replication factor.</P><P>for example if you have 4 indexers, max total number of buckets would be 450*4.</P><P>I have run searches you have shared in my standard alone box. its giving exact same results.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dbinspect.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10704i48496F611D954278/image-size/large?v=v2&amp;px=999" role="button" title="dbinspect.png" alt="dbinspect.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="rest.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10703i6ED818E75F655974/image-size/large?v=v2&amp;px=999" role="button" title="rest.png" alt="rest.png" /></span></P> Tue, 08 Sep 2020 06:52:41 GMT https://community.splunk.com/t5/Monitoring-Splunk/DBinspect-vs-rest-call/m-p/518365#M4441 thambisetty 2020-09-08T06:52:41Z