Getting Data In

Where do I run the Splunk CLI command "remove index"?

katzr
Path Finder

Hello,

I am trying to remove an index entirely, and I have found Splunk documentation that says...

"To remove an index entirely (and not just the data contained in it), use the CLI command remove index"

What location/directory should I be running this CLI command? I am using an on-prem Enterprise license. I think I should be running it here:

\Splunk\bin

My etc, lib, var folders are also located under the \Splunk directory for context of what that folder is for me. Is that the right location to run the remove index command?

Thanks in advance for the help!

0 Karma
1 Solution

Vijeta
Influencer

Yes it will be in splunk\bin location, any executable command is run from bin directory.
Also this may be helpful https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/RemovedatafromSplunk

View solution in original post

0 Karma

Vijeta
Influencer

Yes it will be in splunk\bin location, any executable command is run from bin directory.
Also this may be helpful https://docs.splunk.com/Documentation/Splunk/7.2.3/Indexer/RemovedatafromSplunk

0 Karma
Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...

Reminder! Splunk Love Promo: $25 Visa Gift Card for Your Honest SOAR Review With ...

We recently launched our first Splunk Love Special, and it's gone phenomenally well, so we're doing it again, ...