icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Fire Brigade
SHA256 checksum (fire-brigade_211.tgz) 07f0a4ac2ea1d2187395708e7ff9b0bfb23afe0d2df0bc16bb5fa023829b77e8 SHA256 checksum (fire-brigade_210.tgz) 3d81e6e1271fa71fe4291a3707dfdc50b9eb691dd163c38525e5ce8569c2bb4d SHA256 checksum (fire-brigade_204.tgz) 2f3aec6147209505962c71803060cd2e2895daeecb8b8bfc4cd4d95d0cb14cc8 SHA256 checksum (fire-brigade_12.tgz) e34bf66d3abc159bdc11ded1bdbfad61a412729a6c872a392abc0e4d3f8e448f SHA256 checksum (fire-brigade_11.tgz) e3358ea47d6730c33cd6357daf6d29caca933c6e49fa75b0e7186b835d946528 SHA256 checksum (fire-brigade_10.tgz) c214415773160706787eeba0cdb5ce52219c3c8c424dc04fc46ef4c3ff99aae0
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

Fire Brigade

Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
The Fire Brigade application provides inspection and insight into the health of indexes in Splunk environments.

This app has now been "merged" with the old "Fire Brigade Version 2" which is for versions 6.0 and higher. If you're looking to install on Splunk version 5.0, you'll need to stick with version 1.2 (see version pulldown, below the screenshots on the right).

This version (2.1) has the following updates:
New views to highlight the disk usage devoted to data model summaries
Updated help
Tracking bucket transitions due to TSIDX minification
Tracking bucket transitions due to volume management
Provide information about "ballast" buckets (those with future dates)

Fire Brigade app 2.1

A Splunk app to provide insight into index state

This application is aimed at helping administrators understand the current
state of their index, as it relates to disk footprint, and the retention
settings for the index.

Due to changes in the operation of dbinspect introduced in Splunk 6.0, as well
as changes to the application packaging, this app by itself is no longer
sufficient to collect data for a standalone system. The TA-fire_brigade
application will also be required, to act as the data collection source.
In a distributed environment, the TA-fire_brigade app will also be required.
In small environments, a single installation of the TA on the search head can
collect data from all of the indexers. In larger installations, however, the
TA should be installed on all indexing nodes, and not on the search head.

The TA (and a saved search within the full app) collects data using the
dbinspect search command. This detail of the constituent buckets in the index
is used to drive several visualizations about the state of the index.


The output from the dbinspect command changed in version 6.0. This app is
specifically tuned for version 6.0 and higher. If you're running Splunk 4.3 or
Splunk 5.x, use TA-fire_brigade version 1.0.

Thanks and Acknowledgements

Thanks to all of the sites that tested early versions of the application. My
colleagues were helpful in getting the application to a wider audience, as
well as providing critical feedback in improving the dashboards.

Dritan Bitincka, Yisroel Bongart, Tian Chen, Michael Cormier, Joe Cramasta,
Fred de Boer, Octavio di Sciullo, John Dunlea, Nick Filippi, Charles Fox,
Marc Francoeur, Adam Gabel, Thomas Gadbois, Jim Goddard, Bob Hartley,
Tim Hatcher, Zhiyi Huang, Robert Knoeppler, Mark Lindsey, James Lord,
Mike Loven, Nick Malecky, Nate McKervey, Erick Mechler, Craig Nelson,
Shane Newman, Chad O'Neal, Drew Osborne, David Paper, Cheryl Phair,
Rich Prescott, Greg Quale, Vladimir Serebryany, Matthew Settipane,
Sandy Voellinger, Brian Wooden

Release Notes

Version 2.1.1
Sept. 14, 2016

Bug fixes.

Version 2.1.0
July 13, 2016

Version 2.0.4
Oct. 22, 2015

Fixes for 6.3.

Version 1.2
Nov. 15, 2013

New view for a single index across all hosts: "Cross-Host Index Overview" in the Overview menu.

Version 1.1
Oct. 29, 2013

Search updates, cosmetic tweaks.

Version 1.0
Sept. 11, 2013


Subscribe Share

AppInspect Tooling

Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
© 2005-2020 Splunk Inc. All rights reserved.
Splunk®, Splunk>®, Listen to Your Data®, The Engine for Machine Data®, Hunk®, Splunk Cloud™, Splunk Light™, SPL™ and Splunk MINT™ are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.