Deployment Architecture
Highlighted

Where are the logs for buckets activity located

Contributor

Where can I find the log for the bucket activities? I want to troubleshoot on when Splunk checks bucket sizes and when it moves buckets from each state (hot to warm, warm to cold, cold to frozen).

Highlighted

Re: Where are the logs for buckets activity located

Builder

According to the "Index activity" view in Splunk's search app (v4.x), bucket related messages are in splunkd.log, tagged with databasepartitionPolicy or HotDBManager.

View solution in original post

Highlighted

Re: Where are the logs for buckets activity located

Splunk Employee
Splunk Employee
0 Karma