<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Flush all logs in  indexes in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50745#M22223</link>
    <description>&lt;P&gt;I want to flush all the logs in my indexes in splunk server.&lt;BR /&gt;
I am stopping the splunk process&lt;BR /&gt;
And then doing splunk clean eventdata&lt;BR /&gt;
But even though it shows all cleaned when i restart splunk I see hot_v1_9 folder still in the db.&lt;BR /&gt;
How do I flush every log in the index?&lt;/P&gt;</description>
    <pubDate>Mon, 28 Sep 2020 12:53:41 GMT</pubDate>
    <dc:creator>pdash</dc:creator>
    <dc:date>2020-09-28T12:53:41Z</dc:date>
    <item>
      <title>Flush all logs in  indexes</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50745#M22223</link>
      <description>&lt;P&gt;I want to flush all the logs in my indexes in splunk server.&lt;BR /&gt;
I am stopping the splunk process&lt;BR /&gt;
And then doing splunk clean eventdata&lt;BR /&gt;
But even though it shows all cleaned when i restart splunk I see hot_v1_9 folder still in the db.&lt;BR /&gt;
How do I flush every log in the index?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:53:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50745#M22223</guid>
      <dc:creator>pdash</dc:creator>
      <dc:date>2020-09-28T12:53:41Z</dc:date>
    </item>
    <item>
      <title>Re: Flush all logs in  indexes</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50746#M22224</link>
      <description>&lt;P&gt;Does the hot_v1_9 folder have a particularly large size? Splunk will create a new hot bucket as it starts for an active index and if there is any data for it.&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:53:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50746#M22224</guid>
      <dc:creator>Drainy</dc:creator>
      <dc:date>2020-09-28T12:53:49Z</dc:date>
    </item>
    <item>
      <title>Re: Flush all logs in  indexes</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50747#M22225</link>
      <description>&lt;P&gt;yes its around 1.2G. So will it affect if i delete these folders? I dont need the indexed data anyways.&lt;/P&gt;</description>
      <pubDate>Fri, 30 Nov 2012 22:35:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50747#M22225</guid>
      <dc:creator>pdash</dc:creator>
      <dc:date>2012-11-30T22:35:09Z</dc:date>
    </item>
    <item>
      <title>Re: Flush all logs in  indexes</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50748#M22226</link>
      <description>&lt;P&gt;Take a backup first but if you stop Splunk and delete the folder so no buckets exist it should create them as needed.&lt;/P&gt;</description>
      <pubDate>Fri, 30 Nov 2012 22:52:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Flush-all-logs-in-indexes/m-p/50748#M22226</guid>
      <dc:creator>Drainy</dc:creator>
      <dc:date>2012-11-30T22:52:58Z</dc:date>
    </item>
  </channel>
</rss>

