Splunk Search

Help with Query to list current status buckets

grivera_kudaw
Explorer

Hi.

Somebody to help me with a query to list current status buckets, example

Bucket Name Current Status
_internal~1321~D5156C32-9B6F Cannot Fix search count as the bucket hasn´t rolled yet

0 Karma

dkeck
Influencer

HI,

maybe this would help, will give you the state of buckets

| dbinspect index=*

or on master

| rest /services/cluster/master/buckets

0 Karma

dkeck
Influencer

If it helped please accept the answer 🙂

0 Karma

grivera_kudaw
Explorer

Hi.
Thank you.

I had already tried with those queries, but they do not show what I need to identify the bucket with the state "..hasn't rolled yet".

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...