Knowledge Management

Splunk fsck repair - cancelation

rquish94
Explorer

Hi All,

I recently started a fsck repair on all buckets for a particular index on one of my clustered indexers. Unfortunately I was unaware of how long it would take to run and how long it would keep our indexer down...

With that being said, im wondering what the repercussions of interrupting the processes might be?? I'm also concerned that the putty session (internet connection) that's running might time out before it completes. I'm assuming the repair would stop then?

Any advice on the best moves here would be appreciated as well as any info/risks that I'd be running if interrupted or potential cluster issues afterwards.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...