Deployment Architecture

Unable to perform any operation : Previously scheduled Remove Excess Buckets is running

Loves-to-Learn Lots

Can someone help me to check if any way to stop the scheduled excess bucket removal? Or anything that could speed up the task. 

I am trying to perform data-rebalance on the cluster and seems it is blocked by on going excess bucket removal.   




Labels (1)
Tags (1)
0 Karma


You can go to Activity > Jobs > Apps: All and find the remove excess buckets job. From there you can pause or stop it.

An upvote would be appreciated and Accept Solution if it helps!
0 Karma

Loves-to-Learn Lots

I could not see any jobs from GUI ,related to excess buckets . 

However below  steps on cluster master has fix the issue 

1) splunk enable maintenance-mode
2) splunk restart
3) splunk disable maintenance-mode


0 Karma
Get Updates on the Splunk Community!

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...