How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

[kandersen]

I only get information about the first 31 buckets with the rest api:
https://localhost:8089/services/cluster/master/buckets
But we have a lot more buckets.
It's Splunk Enterprise V6.5.2

What can I do to get the information about all buckets, or is there a bug in this rest call?

[PowerPacked]

Hi @kandersen

You can also find information regarding the Buckets in introspection index.

try this search and replace index in data.name=_internal with your index

index="_introspection" sourcetype="splunk_disk_objects" component=indexes data.name=_internal

you will find info like bucket count, event count, size, for all hot/warm, cold, thawed for the index & all the indexes.

Thanks