Knowledge Management

How can I delete a KV Store Collection using Splunk API?

alonsocaio
Contributor

Hi,

I need to delete some KV Store Collections, and the only way I have to perform this kind of action is using the REST API, since I'm on Splunk Cloud.

When I create KV Store Collections, I use this request, following the docs on Use the Splunk REST API to manage KV Store collections and data in Splunk Cloud Platform or Splunk E... : 

 

curl -k -u USER -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config

 

What I would like to know is how can I delete the KV Store Collection using the same approach. 

Thanks

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

According to the REST API Manual at https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi... you send a DELETE operation to a similar URL.

curl -k -u USER -X DELETE -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config/<<collection-name>>
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

According to the REST API Manual at https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi... you send a DELETE operation to a similar URL.

curl -k -u USER -X DELETE -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config/<<collection-name>>
---
If this reply helps you, Karma would be appreciated.

alonsocaio
Contributor

Hi,

It worked, thanks for you response!

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...