Improve Query performance by removing corrupted buckets in vRealize Log Insight

Query performance of vRealize Log Insight may degrade while under average or low load.

Corrupted data buckets in the inventory of vRealize Log Insight can cause slow querying.

To Improve performance, remove the corrupted buckets from the vRealize Log Insight inventory.

To identifying and remove corrupted buckets from the inventory, use one of these options:

Option 1

1. Analyze /storage/var/loginsight/runtime.log and compile a list of bucket UUIDs to remove.
2. Stop the Log Insight service by running the following command:

service loginsight stop

3. Run the following command to remove a bucket:

/usr/lib/loginsight/application/sbin/bucket-index UUID delete

Note: Replace UUID with the UUID of a bucket found in step 1.

4. Repeat step 3 for all UUIDs in your list.
5. Start the Log Insight service by running the following command:

service loginsight start

Option 2

1. Change to the /usr/lib/loginsight/application/sbin/ Directory:

cd /usr/lib/loginsight/application/sbin/

2. Run the bucket validator to determine the UUIDs of the corrupted buckets

./validate-bucket -Vv

3. Stop the Log Insight service by running the following command: 

service loginsight stop​​

4. Run the following command to remove a bucket:

./bucket-index UUID delete

Note: Replace UUID with the UUID of a bucket found in step 1.

5. Repeat step 4 for all UUIDs in your list.
6. Start the Log Insight service by running the following command:

service loginsight start