What happen when an index is deleted?

[edrivera3]

Hi

I have multiple index. If I delete an index, would the data in it would be erase completely from Splunk?

[skoelpin]

Think of an index as a folder. If you delete a folder then the data within that folder is gone too

[lguinn2 · Accepted solution]

Yes, the data would be completely erased. The disk space would become available.

Data that was being sent to that index would not be indexed. There is no fall-back or default. If inputs.conf references an index that doesn't exist, the data is simply not indexed.

Reports and dashboards that referred to that index would no longer work.