Splunk Search

Help with Query to list current status buckets

grivera_kudaw
Explorer

Hi.

Somebody to help me with a query to list current status buckets, example

Bucket Name Current Status
_internal~1321~D5156C32-9B6F Cannot Fix search count as the bucket hasn´t rolled yet

0 Karma

dkeck
Influencer

HI,

maybe this would help, will give you the state of buckets

| dbinspect index=*

or on master

| rest /services/cluster/master/buckets

0 Karma

dkeck
Influencer

If it helped please accept the answer 🙂

0 Karma

grivera_kudaw
Explorer

Hi.
Thank you.

I had already tried with those queries, but they do not show what I need to identify the bucket with the state "..hasn't rolled yet".

0 Karma
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...