Deployment Architecture

Is it possible to rebuild multiple buckets with this command in the thawed directory?

dantimola
Communicator

I have 1000+ buckets to rebuild. Is the command xargs -i /opt/splunk/bin/splunk rebuild {} effective for rebuilding multiple buckets while I'm on the thawed directory?

1 Solution

dantimola
Communicator

If you're wondering, the right way to rebuild multiple buckets is ls | xargs -i /opt/splunk/bin/splunk rebuild {} command while you are in thawedb directory.

View solution in original post

dantimola
Communicator

If you're wondering, the right way to rebuild multiple buckets is ls | xargs -i /opt/splunk/bin/splunk rebuild {} command while you are in thawedb directory.

arrangineni
Path Finder

@dantimola Thanks for above command, it works for me. Is there way we can modify the command to pick selective buckets out of the folder. I do have previously rebuild-ed buckets in this folder which I don't want to rebuild again

0 Karma
Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...