Deployment Architecture

Buckets ending .rbsentinel in the clustered COLD directory of index and 0 size

splunkreal
Motivator

Hello guys,

what are .rbsentinel files on clustered indexers?

Could they conflict when thawing buckets if they have same bucket ID?

Thanks.

 

* If this helps, please upvote or accept solution if it solved *
Labels (2)
0 Karma
1 Solution

splunkreal
Motivator

Support:

- Restarting the indexer as we know it's normal to make the indexer aware of the new "built" bucket. At the same time Cluster master (if you query the indexers not directly is mandatory to be restarted as it contains the searchability list)
- rbsentinel with zero size are not important what is mandatory to is the starttime_endtime_CLUSTER_UID/FOLDER/filename.tar.gz which contains the essential to build the tsidx information

* If this helps, please upvote or accept solution if it solved *

View solution in original post

0 Karma

splunkreal
Motivator

Support:

- Restarting the indexer as we know it's normal to make the indexer aware of the new "built" bucket. At the same time Cluster master (if you query the indexers not directly is mandatory to be restarted as it contains the searchability list)
- rbsentinel with zero size are not important what is mandatory to is the starttime_endtime_CLUSTER_UID/FOLDER/filename.tar.gz which contains the essential to build the tsidx information

* If this helps, please upvote or accept solution if it solved *
0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...