Deployment Architecture

How to know what buckets are frozen due to size

vrmandadi
Builder

I got an alert that some of the indexes buckets have been freezed due to size.How to get the bucket details .I mean the date of the buckets that got frozen

0 Karma

xavierashe
Contributor

You can also use dbinspect

| dbinspect index=INDEX_NAME| search state=frozen
0 Karma

manjunathmeti
SplunkTrust
SplunkTrust

Hi @vrmandadi,

Check this query:

index=_internal sourcetype=splunkd INDEX_NAME component=BucketMover
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>