topic Why am I unable to delete Splunk from an Ubuntu server? in Getting Data In

Why am I unable to delete Splunk from an Ubuntu server?

splunkfly — Tue, 29 Sep 2020 09:26:43 GMT

I tried deleting Splunk completely from the Ubuntu server. I'm able to delete the splunk_home directory, but when I refresh I could see the Splunk directory again. I tried multiple times, but it is still not getting deleted. Under Splunk_Home I can barely see one directory Splunk_Home/var/

Please help me to delete this completely from my system. I stopped the Splunk server before I deleted with /bin/splunk stop

Re: Why am I unable to delete Splunk from an Ubuntu server?

jensonthottian — Mon, 18 Apr 2016 22:15:16 GMT

what user are you logged in as, do you have permissions to delete it.

Try doing a sudo su - root before using the rm command.

Re: Why am I unable to delete Splunk from an Ubuntu server?

splunkfly — Tue, 19 Apr 2016 13:36:00 GMT

Yes, I'm a root user. I have all the permissions, it is getting deleted when i delete it, but after few minutes the directory appears again at the same location.

Re: Why am I unable to delete Splunk from an Ubuntu server?

jensonthottian — Tue, 19 Apr 2016 15:36:32 GMT

For sure you might have some process running which creates again files and dirs you just deleted.

Run the below and please provide the result:

cd /opt/splunk ; df .

Re: Why am I unable to delete Splunk from an Ubuntu server?

splunkfly — Wed, 20 Apr 2016 16:29:00 GMT

Filesystem 1K-blocks Used Available Use% Mounted on
/dev/dm-0 80083800 2456832 73535884 4% /