topic Re: How do I script Splunk commands in shell script to execute? in Monitoring Splunk

How do I script Splunk commands in shell script to execute?

wkrupinsky — Wed, 12 Apr 2023 16:58:59 GMT

I am writing a shell script which I will execute with a cron job to clean eventdata from files daily. How do I script Splunk commands in shell script to execute?

Here is what I have:

cd /datadrive/opt/splunk/bin
./splunk clean eventdata -index audit
y
./splunk clean eventdata -index _internal
y
./splunk clean eventdata -index _introspection
y
./splunk clean eventdata -index _metrics
y
./splunk clean eventdata -index _telemetry
y
./splunk start

Any and all help would be greatly appreciated.

Re: How do I script Splunk commands in shell script to execute?

somesoni2 — Wed, 12 Apr 2023 17:17:25 GMT

Have a look at this

https://community.splunk.com/t5/Getting-Data-In/Delete-clean-all-the-contents-of-splunk/m-p/183435

Re: How do I script Splunk commands in shell script to execute?

wkrupinsky — Wed, 12 Apr 2023 17:44:04 GMT

Thank you so much, I will try that

Re: How do I script Splunk commands in shell script to execute?

woodcock — Wed, 12 Apr 2023 21:39:46 GMT

/datadrive/opt/splunk/bin/splunk stop
/datadrive/opt/splunk/bin/splunk clean eventdata -index audit --answer-yes
/datadrive/opt/splunk/bin/splunk clean eventdata -index _internal --answer-yes
/datadrive/opt/splunk/bin/splunk clean eventdata -index _introspection --answer-yes
/datadrive/opt/splunk/bin/splunk clean eventdata -index _metrics --answer-yes
/datadrive/opt/splunk/bin/splunk clean eventdata -index _telemetry --answer-yes
/datadrive/opt/splunk/bin/splunk start