Splunk search for Buckets per indexer and index
Copy
| dbinspect index=* | search index!=_* | chart dc(bucketId) over splunk_server by index | rename splunk_server as Indexer
This Splunk search will provide the total count of all buckets currently in your Splunk environment separated out by Index and Indexer. This search can be used to check if your buckets are being evenly distributed across your indexers.
0 comments
[0]
[0]
[0]
[0]
Sign in or Register to submit a comment