ERROR DatabaseDirectoryManager::Bucket

[vadud3]

11-09-2010 00:00:57.985 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/cisco-cc'.
11-09-2010 00:01:01.012 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/cisco-cc'.
11-09-2010 00:01:01.015 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/cisco-cc'.
11-09-2010 00:01:04.248 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 00:01:28.441 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 00:03:13.104 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 00:04:37.773 INFO  LicenseManager - Recalculating persistent statistics
11-09-2010 00:13:04.069 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 18:20:36.170 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 18:20:36.429 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 18:20:36.433 INFO  WatchedFile - Will begin reading at offset=0 for file='/opt/splunk/var/log/splunk/metrics.log'.
11-09-2010 18:20:36.521 INFO  WatchedFile - Will begin reading at offset=24999692 for file='/opt/splunk/var/log/splunk/metrics.log.1'.
11-09-2010 19:29:32.445 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 23:59:07.098 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 23:59:07.119 INFO  WatchedFile - Checksum for seekptr didn't match, will re-read entire file='/var/logs/current/shasta'.
11-09-2010 23:59:07.119 INFO  WatchedFile - Will begin reading at offset=0 for file='/var/logs/current/shasta'.
11-09-2010 23:59:31.663 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-09-2010 23:59:31.687 INFO  WatchedFile - Checksum for seekptr didn't match, will re-read entire file='/var/logs/current/cisco'.
11-09-2010 23:59:31.687 INFO  WatchedFile - Will begin reading at offset=0 for file='/var/logs/current/cisco'.
11-10-2010 00:00:08.491 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/cisco-qmoe'.
11-10-2010 00:00:26.188 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-10-2010 00:00:26.227 INFO  WatchedFile - Checksum for seekptr didn't match, will re-read entire file='/var/logs/current/juniper'.
11-10-2010 00:00:26.227 INFO  WatchedFile - Will begin reading at offset=0 for file='/var/logs/current/juniper'.
11-10-2010 00:00:55.118 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/arbor'.
11-10-2010 00:00:57.158 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/dial'.
11-10-2010 00:00:57.168 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/alcatel'.
11-10-2010 00:01:00.167 INFO  WatchedFile - File too small to check seekcrc, probably truncated.  Will re-read entire file='/var/logs/current/dial'.
11-10-2010 00:01:04.414 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-10-2010 00:01:09.452 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-10-2010 00:03:19.371 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.
11-10-2010 00:03:30.937 INFO  LicenseManager - Recalculating persistent statistics
11-10-2010 00:05:01.064 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.

I am seeing lots of these error messages. What does it mean? Something I need to worry about?

[hexx]

These messages indicate that there was an attempt to match the presence of the bucket with ID 734 with it's sentinel file.

11-09-2010 19:29:32.445 ERROR DatabaseDirectoryManager::Bucket - Unable to find a directory for id = 734 when attempting to validate a sentinel.

This might happen if the bucket has been manually moved out of the index, or if it has been retired in compliance with the age/disk usage policies of that index and it's .sentinel file is still there.

You should be able to match the bucket ID with the corresponding directory db_{epoch_time_of_newest_event_in_bucket}_{epoch_time_of_oldest_event_time_in_bucket}_{bucketID} by consulting the .bucketManifest file found in that index.

Once the absence of the bucket from the index is confirmed and can be explained, the easiest fix to get rid of these messages is to remove the .sentinel file that goes along with the bucket with ID 734.