Deployment Architecture

Index Cluster: How do I identify list of excess Buckets in Clustered environment?

sat94541
Communicator

Refer http://docs.splunk.com/Documentation/Splunk/6.1/Indexer/Removeextrabucketcopies, this documentation provide the list of excess buckets using command

splunk list excess-buckets [index-name]

This just provide the count of excess bucket but not bucket id's

Tags (2)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

To get the list of excess replicated Buckets you can run the following search on the Cluster Master

|rest /services/cluster/master/buckets filter=replication_count>

To get the list of excess search buckets you can run the following search on the Cluster Master

|rest /services/cluster/master/buckets filter=search_count>

Get Updates on the Splunk Community!

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Splunk App for Anomaly Detection End of Life Announcement

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...