Deployment Architecture

Is it safe to remove restored buckets in thaweddb without stopping splunkd?

melonman
Motivator

Hi

I am looking for a answer about how to remove safely from the restored buckets from thaweddb directory after restoring/rebuilding archived buckets into thaweddb.

Is it safe to simply remove the restored buckets from thaweddb directory without stopping splunkd?
I would like to know if there is a specific procedure for this operation.

The restored buckets can be safely removed without splunkd by rm commands?

Thank you in advance,

0 Karma
1 Solution

Splunk_Shinobi
Splunk Employee
Splunk Employee

I usually stop splunk web to avoid any access while deleting the buckets.
It should work without stopping splunkd while deleteing buckets in thaweddb, but to be sate, better to stop if allowed.

View solution in original post

0 Karma

Splunk_Shinobi
Splunk Employee
Splunk Employee

I usually stop splunk web to avoid any access while deleting the buckets.
It should work without stopping splunkd while deleteing buckets in thaweddb, but to be sate, better to stop if allowed.

0 Karma
Get Updates on the Splunk Community!

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...