dbinspect
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
dbinspect
Synopsis
Returns information about the Splunk index.
Syntax
dbinspect [index=<string>] [<span>|<timeformat>]
Optional arguments
- index
- Syntax: index=<string>
- Description: Specify the name of the index to inspect.
- <span>
- Syntax: span=<int>|<int><timescale>
- Description: Specify the span length of the bucket. If using a timescale unit (sec, min, hr, day, month, or subseconds), this is used as a time range. If not, this is an absolute bucket "length".
- <timeformat>
- Syntax: timeformat=<string>
- Description: Set the time format. Defaults to
timeformat=%m/%d/%Y:%H:%M:%S.
Time scale units
These are options for specifying a timescale as the bucket span.
- <timescale>
- Syntax: <sec> | <min> | <hr> | <day> | <month> | <subseconds>
- Description: Time scale units.
- <sec>
- Syntax: s | sec | secs | second | seconds
- Description: Time scale in seconds.
- <min>
- Syntax: m | min | mins | minute | minutes
- Description: Time scale in minutes.
- <hr>
- Syntax: h | hr | hrs | hour | hours
- Description: Time scale in hours.
- <day>
- Syntax: d | day | days
- Description: Time scale in days.
- <month>
- Syntax: mon | month | months
- Description: Time scale in months.
- <subseconds>
- Syntax: us | ms | cs | ds
- Description: Time scale in microseconds (us), milliseconds (ms), centiseconds (cs), or deciseconds (ds).
Description
The dbinspect command returns information about the Splunk index that you specify.
When you invoke the dbinspect command without a bucket span, Splunk returns the following information about the given index's buckets: earliestTime, eventCount, hostCount, id, latestTime, modTime, path, sizeOnDiskMB, sourceCount, sourceTypeCount, and state.
When you invoke the dbinspect command with a bucket span, Splunk returns a chartable representation of the spans of each bucket.
Examples
Example 1: Display a chart with the span size of 1 day.
| dbinspect index=_internal span=1dAnswers
Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the dbinspect command.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 , 4.2 , 4.2.1 , 4.2.2 , 4.2.3 , 4.2.4 , 4.2.5 View the Article History for its revisions.