Error -> Success! The error is just a mechanism being (ab)used to report the success of your action. In 4.1.4, there will be a splunk bucket-maint command-line command to perform this action. The '|debug' search method continues to emit an error at this time, because the command line search implementation only emits errors, and the foolishness of the error is better than the foolishness of no feedback at all. In a 4.2 or later relase we will empower the command line to emit non-error informational messages. ... View more