Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

What are the reasons for buckets with name duplicate-* in splunk indexer cluster?

$
0
0
We have recently changed the index path for an indexer node to add additional disk and currently experiencing an issue with duplicate buckets created in indexer cluster. Steps performed - Offline the node - Move the data from old directory to new directory - Changed the path in indexes.conf to point to the new directory - Started up node. The hot an warm buckets are in one directory/path and cold buckets are on another path. Currently we have buckets with name duplicate-rb-* in **colddb** (only). Tried removing the duplicate bucket and restarted node, but it's still the same. How do we get rid of the duplicates since it's consuming considerable amount of space? **Configuration** multisite=true site_replication_factor = origin:1,total:2 replication_factor = 2 Two nodes on each site. Verified few buckets manually and the raw data seems to be same in original as well as in duplicate. So it does not seem to be an bucket id generation issue.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>