Archive

|dbinspect returns No results

Motivator

When I try to run dbinspect, it returns no results:
| dbinspect index=_internal span=1d

I have a single search head (where I'm running this), distributing search to 2 indexers.

Tags (1)

SplunkTrust
SplunkTrust

I don't think dbinspect is distributed search compatible. I think you have to run it on each indexer independently.