Deployment Architecture

How to roll HOT to WARM in 4.2?

Jason
Motivator

I saw an answer from last year about a possible new command ./splunk bucket-maint - it seems to be there, but there is zero documentation on it.

What is the proper way to force a roll of all buckets in index x from hot to warm (indexer migration, backups, etc) in 4.2?

Tags (2)
1 Solution

piebob
Splunk Employee
Splunk Employee

as described in the docs, the command for rolling buckets manually from hot to warm is

./splunk _internal call /data/indexes/<index_name>/roll-hot-buckets –auth <admin_username>:<admin_password>

see: http://www.splunk.com/base/Documentation/latest/Admin/Backupindexeddata#Rolling_buckets_manually_fro...

View solution in original post

piebob
Splunk Employee
Splunk Employee

as described in the docs, the command for rolling buckets manually from hot to warm is

./splunk _internal call /data/indexes/<index_name>/roll-hot-buckets –auth <admin_username>:<admin_password>

see: http://www.splunk.com/base/Documentation/latest/Admin/Backupindexeddata#Rolling_buckets_manually_fro...

jrodman
Splunk Employee
Splunk Employee

The _internal call is just a manual way to hit the roll endpoint, so it should work until we maybe someday change the REST interface to request this, or change the '_internal' command somehow (more likely). You could achieve the same thing with wget.
bucket-maint was added as a friendlier interface, a real command.

0 Karma

Jason
Motivator

Confirmed, this 4.1.x command does work as expected in 4.2.

0 Karma

Jason
Motivator

Okay, I'll go with the 4.1.x method for now. Bucket-maint is mentioned by Josh here: http://answers.splunk.com/questions/2473/

0 Karma

piebob
Splunk Employee
Splunk Employee

we'll look into the bucket-maint command you heard about, though 🙂

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...