Splunk

From Torben's Wiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
cd C:\Program Files\Splunk\bin
./splunk help clean

To permanently remove event data from all indexes, type:

./splunk stop
./splunk clean eventdata

To permanently remove event data from a single index, type:

./splunk stop
./splunk clean eventdata -index <index_name>