Knowledge Management

How can I delete a KV Store Collection using Splunk API?

alonsocaio
Contributor

Hi,

I need to delete some KV Store Collections, and the only way I have to perform this kind of action is using the REST API, since I'm on Splunk Cloud.

When I create KV Store Collections, I use this request, following the docs on Use the Splunk REST API to manage KV Store collections and data in Splunk Cloud Platform or Splunk E... : 

 

curl -k -u USER -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config

 

What I would like to know is how can I delete the KV Store Collection using the same approach. 

Thanks

Labels (1)
Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

According to the REST API Manual at https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi... you send a DELETE operation to a similar URL.

curl -k -u USER -X DELETE -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config/<<collection-name>>
---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

According to the REST API Manual at https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTkvstore#storage.2Fcollections.2Fconfi... you send a DELETE operation to a similar URL.

curl -k -u USER -X DELETE -d name=KV-COLLECTION-NAME https://HOSTNAME.splunkcloud.com:8089/servicesNS/nobody/APP_NAME/storage/collections/config/<<collection-name>>
---
If this reply helps you, Karma would be appreciated.

alonsocaio
Contributor

Hi,

It worked, thanks for you response!

0 Karma
Get Updates on the Splunk Community!

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...