Splunk Enterprise

Anyone have this issue: Buckets error - Root Cause

WildHuckleberry
Path Finder

Hello Splunkers,

On many of sites, we are experiencing this Buckets Error. 

Does anyone have the same issues? and how can we solve this issue? 

I really appreciate about your work will be provided. 

 

Buckets
Root Cause(s):
The percentage of small buckets (100%) created over the last hour is high and exceeded the red thresholds (50%) for index=_internal, and possibly more indexes, on this indexer. At the time this alert fired, total buckets created=4, small buckets=4
Unhealthy Instances
idx3
idx4

Labels (3)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...