Getting Data In

How to delete a index permanantly in clustered environment?

kiran331
Builder

HI,

If I remove the index stanza in indexes.conf and deploy it indexers will it remove the index? OR is there any best way to do it?

Tags (2)
0 Karma

jkat54
SplunkTrust
SplunkTrust

It will not delete the files. It will only make the index non-searchable.

You'll need to log into each indexer and delete the data on the file system.

By default it is found under /opt/splunk/var/lib/splunk/{indexName}

Get Updates on the Splunk Community!

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...