Knowledge Management

Splunk fsck repair - cancelation

rquish94
Explorer

Hi All,

I recently started a fsck repair on all buckets for a particular index on one of my clustered indexers. Unfortunately I was unaware of how long it would take to run and how long it would keep our indexer down...

With that being said, im wondering what the repercussions of interrupting the processes might be?? I'm also concerned that the putty session (internet connection) that's running might time out before it completes. I'm assuming the repair would stop then?

Any advice on the best moves here would be appreciated as well as any info/risks that I'd be running if interrupted or potential cluster issues afterwards.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...