...eplication factor from 3 to 2, once an indexer failure is something really rare.
My issue is that I set this config and restarted my Cluster Master, as requested, but the available disk space on my indexer...
...n thecluster master, what is the procedure to apply and removetheexcessbuckets?
Is it:
* server.conf change on cluster master
* restart splunk on cluster master to apply change
* Click "Remove...
...olicy; this may work for a 90 day retention policy, but not if it's like a year.)
Is there a way to manually trigger bucket replication between two peers and then removethecopiesfromthe original n...
We are in Multi-site clustered environment with Site RF and SF= 3 and for different indexes, we see a number of buckets listed as excessbuckets. Due to some reason, we are unable to removethese buckets
...y | dbinspect index=* .
As noted here:
https://answers.splunk.com/answers/108941/deleting-a-bucket.html#answer-108942
hot/warm/cold buckets should not be removed while the server is running, b...
The splunk removeexcess-buckets [index-name] command is not clearing all theexcessbuckets.
Have tried to clear from GUI and command line as well.
Thebuckets do not get cleared even after r...
...owever, on theindexers, the size of $SPLUNK_DB/index1/colddb and $SPLUNK_DB/index1/db are 1.8TB and 2.1TB respectively.
Is this right?
Is there any way i can reduce the disk usage with the data r...
Hi,
I see some excessbuckets in thebucket status tab in theindexerclustering page.
Is it safe to click remove button ? Does data become unavailable during the operation ?
Should the...
...estart indexers and CM as appropriate Disable maintenance mode Allow excessbucket fix up activities to complete Once cluster has regained status quo, shutdown old indexers Remove reference to old indexer...
Hello,
When trying to remove all excessbuckets via theCluster Master in a multisite indexerclustered environment, we don't see all excessbuckets being removed, only some. Is it possible that the...