Splunk Search

|dbinspect returns No results

mikelanghorst
Motivator

When I try to run dbinspect, it returns no results:
| dbinspect index=_internal span=1d

I have a single search head (where I'm running this), distributing search to 2 indexers.

Tags (1)

dwaddle
SplunkTrust
SplunkTrust

I don't think dbinspect is distributed search compatible. I think you have to run it on each indexer independently.

Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...