Getting Data In

How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

New Member

I only get information about the first 31 buckets with the rest api:
But we have a lot more buckets.
It's Splunk Enterprise V6.5.2

What can I do to get the information about all buckets, or is there a bug in this rest call?

0 Karma


Hi @kandersen

You can also find information regarding the Buckets in introspection index.

try this search and replace index in with your index

index="_introspection" sourcetype="splunk_disk_objects" component=indexes

you will find info like bucket count, event count, size, for all hot/warm, cold, thawed for the index & all the indexes.


0 Karma
Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...