Getting Data In

Having trouble cleaning index data

New Member

[root@syslog bin]# ./splunk clean eventdata
In order to clean, Splunkd must not be running.

Attempting to run splunkd fails with a libssl library not existing.
Wasnt able to locate that one anywhere...

I'm running CENTOS 6.4
Please HELP!

0 Karma

Splunk Employee
Splunk Employee

The warning about libssl is almost certainly because you are trying to run splunkd directly, instead of splunk.

0 Karma

Legend

It's exactly like the error message says - you can't clean your index while Splunk is running. Run "splunk stop" (NOT "splunkd stop", splunkd is not meant to be run directly by users), then clean out your index(es).

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!