Deployment Architecture

How to roll HOT to WARM in 4.2?

Jason
Motivator

I saw an answer from last year about a possible new command ./splunk bucket-maint - it seems to be there, but there is zero documentation on it.

What is the proper way to force a roll of all buckets in index x from hot to warm (indexer migration, backups, etc) in 4.2?

Tags (2)
1 Solution

piebob
Motivator

as described in the docs, the command for rolling buckets manually from hot to warm is

./splunk _internal call /data/indexes/<index_name>/roll-hot-buckets –auth <admin_username>:<admin_password>

see: http://www.splunk.com/base/Documentation/latest/Admin/Backupindexeddata#Rolling_buckets_manually_fro...

View solution in original post

piebob
Motivator

as described in the docs, the command for rolling buckets manually from hot to warm is

./splunk _internal call /data/indexes/<index_name>/roll-hot-buckets –auth <admin_username>:<admin_password>

see: http://www.splunk.com/base/Documentation/latest/Admin/Backupindexeddata#Rolling_buckets_manually_fro...

View solution in original post

jrodman
Splunk Employee
Splunk Employee

The _internal call is just a manual way to hit the roll endpoint, so it should work until we maybe someday change the REST interface to request this, or change the '_internal' command somehow (more likely). You could achieve the same thing with wget.
bucket-maint was added as a friendlier interface, a real command.

0 Karma

Jason
Motivator

Confirmed, this 4.1.x command does work as expected in 4.2.

0 Karma

Jason
Motivator

Okay, I'll go with the 4.1.x method for now. Bucket-maint is mentioned by Josh here: http://answers.splunk.com/questions/2473/

0 Karma

piebob
Motivator

we'll look into the bucket-maint command you heard about, though 🙂

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!