Getting Data In

How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

New Member

I only get information about the first 31 buckets with the rest api:
But we have a lot more buckets.
It's Splunk Enterprise V6.5.2

What can I do to get the information about all buckets, or is there a bug in this rest call?

0 Karma


Hi @kandersen

You can also find information regarding the Buckets in introspection index.

try this search and replace index in with your index

index="_introspection" sourcetype="splunk_disk_objects" component=indexes

you will find info like bucket count, event count, size, for all hot/warm, cold, thawed for the index & all the indexes.


0 Karma
Get Updates on the Splunk Community!

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...