반응형
There isn't any great way to do this from the UI. However, there is a really simple way to do this from the command line:
splunk stopsplunk clean eventdata -index yourindexsplunk start
It cleans very fast, since it is just deleting all the files. If you want to clean ALL indexes, just leave off the
반응형
'Big Data > Splunk' 카테고리의 다른 글
| Splunk Best Practices (0) | 2022.01.21 |
|---|---|
| viz_tutorial_app (0) | 2020.03.23 |
| Splunk Architecture: Tutorial On Forwarder, Indexer And Search Head (0) | 2019.02.05 |
| How to Reset the Admin password (0) | 2018.10.22 |
| Splunk 개념 이해하기 (0) | 2018.08.29 |