How to find bucket status

[Praz_123]

How to find the bucket status in the CLI 

As I am using the below query :-
./splunk search "| dbinspect index=_internal span=1d"

[PickleRick]

More words please.

What are you trying to achieve?

If you just want to list all buckets for a given index you can do something like this:

splunk search "| dbinspect index=_internal earliest=1 | table bucketId state"

[Praz_123]

@PickleRick 

I need to get the result like the below shown as in image but while am running span=1d it shows error 

[PickleRick]

And how are we supposed to know what is the cause of this error when we don't know what error it is?

[Praz_123]

@PickleRick 

Error - INFO: Cannot use span, bins on a remote storage index unless cached=f is specified (index "_internal").

[PickleRick]

This has nothing to do with the command being run from CLI.

It means that the index you're trying to dbinspect is a smartstore-enabled index and therefore you only can do limited dbinspect on it. See the docs on dbinspect command for details.

[Praz_123]

@PickleRick 

But how can I get the data like below image 

[PickleRick]

As I said - read the dbinspect docs - specifically the section about the "cached" parameter. You can get that info but it will only pertain to the local copies of the buckets, not the cached metadata. Which makes sense since cached metadata only contains the general "boundaries" of the bucket, not its data distribution inside.