How can I delete input data and index date to start from scratch ?
Thank you Markus
http://docs.splunk.com/Documentation/Splunk/latest/Admin/RemovedatafromSplunk#Remove_data_from_index...
View solution in original post
ahh ./splunk clean eventdata -index
Brilliant thanks!!
I also want to know this but just get a page with this:
Hi! Just wanted to let you know:
The topic you've asked to see does not apply to the most recent version.
http://docs.splunk.com/Documentation/Splunk/4.3.4/Admin/RemovedatafromSplunk#Remove_data_from_indexe... try this thank you