Splunk Search

Help with Query to list current status buckets

grivera_kudaw
Explorer

Hi.

Somebody to help me with a query to list current status buckets, example

Bucket Name Current Status
_internal~1321~D5156C32-9B6F Cannot Fix search count as the bucket hasn´t rolled yet

0 Karma

dkeck
Influencer

HI,

maybe this would help, will give you the state of buckets

| dbinspect index=*

or on master

| rest /services/cluster/master/buckets

0 Karma

dkeck
Influencer

If it helped please accept the answer 🙂

0 Karma

grivera_kudaw
Explorer

Hi.
Thank you.

I had already tried with those queries, but they do not show what I need to identify the bucket with the state "..hasn't rolled yet".

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...