topic Help with Query to list current status buckets in Splunk Search

Help with Query to list current status buckets

grivera_kudaw — Thu, 24 Jan 2019 19:06:27 GMT

Hi.

Somebody to help me with a query to list current status buckets, example

Bucket Name Current Status
_internal~1321~D5156C32-9B6F Cannot Fix search count as the bucket hasn´t rolled yet

dkeck — Thu, 24 Jan 2019 20:53:31 GMT

HI,

maybe this would help, will give you the state of buckets

| dbinspect index=*

or on master

| rest /services/cluster/master/buckets

dkeck — Sun, 27 Jan 2019 10:32:59 GMT

If it helped please accept the answer 🙂

grivera_kudaw — Tue, 29 Jan 2019 20:34:29 GMT

Hi.
Thank you.

I had already tried with those queries, but they do not show what I need to identify the bucket with the state "..hasn't rolled yet".