Deployment Architecture

Index Cluster: How do I identify list of excess Buckets in Clustered environment?

sat94541
Communicator

Refer http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Removeextrabucketcopies, this documentation provide the list of excess buckets using command

splunk list excess-buckets [index-name]

This just provide the count of excess bucket but not bucket id's

Tags (2)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

To get the list of excess replicated Buckets you can run the following search on the Cluster Master

|rest /services/cluster/master/buckets filter=replication_count>

To get the list of excess search buckets you can run the following search on the Cluster Master

|rest /services/cluster/master/buckets filter=search_count>

Get Updates on the Splunk Community!

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...