Jump to content

Splunk

From Torben's Wiki
Revision as of 23:04, 30 October 2024 by Torben (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
cd C:\Program Files\Splunk\bin
./splunk help clean

To permanently remove event data from all indexes, type:

./splunk stop
./splunk clean eventdata

To permanently remove event data from a single index, type:

./splunk stop
./splunk clean eventdata -index <index_name>