Big Data/Splunk

How to delete data / index (reset start from scratch)

신군. 2019. 2. 3. 11:08
반응형

There isn't any great way to do this from the UI. However, there is a really simple way to do this from the command line:


  1. splunk stop
  2. splunk clean eventdata -index yourindex
  3. splunk start

It cleans very fast, since it is just deleting all the files. If you want to clean ALL indexes, just leave off the 

반응형