Getting Data In

Having trouble cleaning index data

New Member

[root@syslog bin]# ./splunk clean eventdata
In order to clean, Splunkd must not be running.

Attempting to run splunkd fails with a libssl library not existing.
Wasnt able to locate that one anywhere...

I'm running CENTOS 6.4
Please HELP!

0 Karma

Splunk Employee
Splunk Employee

The warning about libssl is almost certainly because you are trying to run splunkd directly, instead of splunk.

0 Karma


It's exactly like the error message says - you can't clean your index while Splunk is running. Run "splunk stop" (NOT "splunkd stop", splunkd is not meant to be run directly by users), then clean out your index(es).