Deployment Architecture

Can we list the hot buckets?

danielbb
Motivator

With all the discussions about smartstore here, there is some sort of treatment of the hot buckets mechanism as a cohesive layer. Can we maybe produce a report of the current hot buckets, their size and age?

Tags (2)
0 Karma

martynoconnor
Communicator

Try this:

| dbinspect where index=* state=hot
| fields startEpoch sizeOnDiskMB path index
| eval now=now(),ageInHours=round(((now-startEpoch)/3600),2),sizeOnDiskMB=round(sizeOnDiskMB,2)
| fields - now startEpoch
| table index path sizeOnDiskMB ageInHours

danielbb
Motivator

Using this query, I see huge discrepancies between the ageInHours for different indexes - how can we visualize it nicely?

BTW, the round function fails to do its job here for some reason.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Hot buckets are not part of SmartStore.

Use the |dbinspect command to for information about buckets, including hot buckets.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...