If I run the same search using the same time window I get sometimes different results. I have added | eval bkt=_bkt | stats count by splunk_server index bkt At the end of the search to check which buckets are being read. For some reason splunk skips 1 or 2 buckets sometimes. We are using indexer cluster (10 nodes, 2 search factor, 3 replication factor). All Data is Searchable, Search Factor is Met and Replication Factor is Met. I don't see any errors in search logs. Any ideas what could be a problem? ... View more

I'm testing Smartstore feature and I would like to test search performance when all buckets have to be downloaded from remote storage. To do this I would like to evict all the buckets from cache. Is there any command for this? ... View more