Status of splunk offline

[bsrikanthreddy5]

Hi, 

I ran "splunk offline --enforce-counts" command on one of the indexer servers in a multisite cluster. it has been over a day. I would like to know the status or progress of my offline command.

Is there a way to know status or progress?

[scelikok]

@bsrikanthreddy5, you can view the status on Cluster Master - Indexer clustering dashboard. The state should be shown as GracefulShutdown after the indexer decommissioned.

[bsrikanthreddy5]

@scelikok I was looking to know the progress, I mean how many buckets or data size in GB or MB are still pending to replicate from the indexer where I ran splunk offline command

[scelikok · Accepted solution]

I cannot test on my environment but I think you should be able to see on Cluster Master - Indexer clustering | Bucket Status fixing activities. Although it will not show you estimated recovery time, but you can monitor how many buckets are waiting for fix.