Having trouble cleaning index data

xcalibur · ‎06-23-2013

[root@syslog bin]# ./splunk clean eventdata
In order to clean, Splunkd must not be running.

Attempting to run splunkd fails with a libssl library not existing.
Wasnt able to locate that one anywhere...

I'm running CENTOS 6.4
Please HELP!

gkanapathy · ‎06-23-2013

The warning about libssl is almost certainly because you are trying to run splunkd directly, instead of splunk.

Ayn · ‎06-23-2013

It's exactly like the error message says - you can't clean your index while Splunk is running. Run "splunk stop" (NOT "splunkd stop", splunkd is not meant to be run directly by users), then clean out your index(es).

Having trouble cleaning index data

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation

Having trouble cleaning index data

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...