Splunk

From Torben's Wiki
Jump to navigationJump to search
cd C:\Program Files\Splunk\bin
./splunk help clean

To permanently remove event data from all indexes, type:

./splunk stop
./splunk clean eventdata

To permanently remove event data from a single index, type:

./splunk stop
./splunk clean eventdata -index <index_name>