Jump to content

Splunk: Difference between revisions

From Torben's Wiki
mNo edit summary
 
(No difference)

Latest revision as of 23:04, 30 October 2024

cd C:\Program Files\Splunk\bin
./splunk help clean

To permanently remove event data from all indexes, type:

./splunk stop
./splunk clean eventdata

To permanently remove event data from a single index, type:

./splunk stop
./splunk clean eventdata -index <index_name>