I am trying to remove an index entirely, and I have found Splunk documentation that says...
"To remove an index entirely (and not just the data contained in it), use the CLI command remove index"
What location/directory should I be running this CLI command? I am using an on-prem Enterprise license. I think I should be running it here:
My etc, lib, var folders are also located under the \Splunk directory for context of what that folder is for me. Is that the right location to run the remove index command?
Thanks in advance for the help!
Yes it will be in splunk\bin location, any executable command is run from bin directory.
Also this may be helpful https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/RemovedatafromSplunk
View solution in original post