Getting Data In

How to get all buckets with https://localhost:8089/services/cluster/master/buckets ?

New Member

I only get information about the first 31 buckets with the rest api:
But we have a lot more buckets.
It's Splunk Enterprise V6.5.2

What can I do to get the information about all buckets, or is there a bug in this rest call?

0 Karma


Hi @kandersen

You can also find information regarding the Buckets in introspection index.

try this search and replace index in with your index

index="_introspection" sourcetype="splunk_disk_objects" component=indexes

you will find info like bucket count, event count, size, for all hot/warm, cold, thawed for the index & all the indexes.


0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...