topic Re: How to fsck scan thaweddb folder? in Monitoring Splunk

How to fsck scan thaweddb folder?

goran_zivkovic — Tue, 29 Sep 2020 12:13:38 GMT

According to official Troubleshooting documentation fscan command has "--thawed" switch in splunk 6.5.1 version also.
(http://docs.splunk.com/Documentation/Splunk/6.5.1/Troubleshooting/CommandlinetoolsforusewithSupport)

I tried to use it as:
splunk fsck scan --all-buckets-one-index --index-name=my_index ----thawed
and got response:
_ Unrecognized argument "--thawed"_

Any idea how to scan all thawed bucket without use external script and single bucket selection?
(splunk fsck scan --one-bucket --bucket-path=/opt/splunk/var/lib/splunk/my_index/thaweddb/db_1234567890/

Re: How to fsck scan thaweddb folder?

ddrillic — Fri, 30 Dec 2016 00:15:16 GMT

Based on Command line tools for use with Support

We see -

Your --index-name=my_index doesn't look right...

Re: How to fsck scan thaweddb folder?

goran_zivkovic — Fri, 30 Dec 2016 06:03:29 GMT

Hi!

Seems that there are some errors on support page:

root@myserver# /opt/splunk/bin/splunk fsck scan --all-buckets-one-index --index myindex --thawed
Unrecognized argument "--index"

Also:
root@myserver# /opt/splunk/bin/splunk fsck --help

USAGE

Supported modes are: scan, repair, clear-bloomfilter, check-integrity, generate-hash-files

:= --one-bucket|--all-buckets-one-index|--all-buckets-all-indexes
[--index-name=] [--bucket-name=] [--bucket-path=]
[--include-hots]
[--local-id=] [--origin-guid=]
[--min-ET=] [--max-LT=]

Re: How to fsck scan thaweddb folder?

goran_zivkovic — Tue, 29 Sep 2020 12:17:15 GMT

Hi!

Little bash scripting can help:

for bucket_folder in ls -1 thawed_folder; do /opt/splunk/bin/splunk fsck scan --one-bucket --bucket-path=thawed_folder/$bucket_folder;done

🙂

Re: How to fsck scan thaweddb folder?

goran_zivkovic — Mon, 09 Jan 2017 08:51:48 GMT

Hi,

As I sad, I used ".. --index myindex" as described in help command, and got error "Unrecognized argument "--index""