Is there a way to re-intialize the current indexes? instead of recreating one?
We are in the process of depoying Splunk. Once the spunk install is all complete, we would like to reset, flush all the indexed data. Is it there a way to do this?
or can I just empty out the /opt/splunk/var/lib/splunk/INDEX_NAME/db/ folder?
I just want to reset all the indexed data with out touching the current configuration.
Appreciate your help, in advance~.
