Splunk Search

Help with Query to list current status buckets

grivera_kudaw
Explorer

Hi.

Somebody to help me with a query to list current status buckets, example

Bucket Name Current Status
_internal~1321~D5156C32-9B6F Cannot Fix search count as the bucket hasn´t rolled yet

0 Karma

dkeck
Influencer

HI,

maybe this would help, will give you the state of buckets

| dbinspect index=*

or on master

| rest /services/cluster/master/buckets

0 Karma

dkeck
Influencer

If it helped please accept the answer 🙂

0 Karma

grivera_kudaw
Explorer

Hi.
Thank you.

I had already tried with those queries, but they do not show what I need to identify the bucket with the state "..hasn't rolled yet".

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...