...eplication factor from 3 to 2, once an indexer failure is something really rare.
My issue is that I set this config and restarted my Cluster Master, as requested, but the available disk space on my indexer...
...ew indexer to cluster, after that tryed to change the RF and SF, both to 3, but when i change the values from splunk web in the master node and restart the instance, th aplatform show me the n...
...n thecluster master, what is the procedure to apply and removetheexcessbuckets?
Is it:
* server.conf change on cluster master
* restart splunk on cluster master to apply change
* Click "Remove...
We are in Multi-site clustered environment with Site RF and SF= 3 and for different indexes, we see a number of buckets listed as excessbuckets. Due to some reason, we are unable to removethese buckets
The splunk removeexcess-buckets [index-name] command is not clearing all theexcessbuckets.
Have tried to clear from GUI and command line as well.
Thebuckets do not get cleared even after r...
...olicy; this may work for a 90 day retention policy, but not if it's like a year.)
Is there a way to manually trigger bucket replication between two peers and then removethecopiesfromthe original n...
...owever, on theindexers, the size of $SPLUNK_DB/index1/colddb and $SPLUNK_DB/index1/db are 1.8TB and 2.1TB respectively.
Is this right?
Is there any way i can reduce the disk usage with the data r...
...y | dbinspect index=* .
As noted here:
https://answers.splunk.com/answers/108941/deleting-a-bucket.html#answer-108942
hot/warm/cold buckets should not be removed while the server is running, b...
Hi,
I see some excessbuckets in thebucket status tab in theindexerclustering page.
Is it safe to click remove button ? Does data become unavailable during the operation ?
Should the...