Delete DB Connect indexed data

[mavidales]

I'm new to Splunk. Most of our logs are in databases. In testing out DB Connect I added some inputs and removed them later. However, the data that was indexed shows up in searches and I'd like to remove that also. Is there a command to do this? I would use splunk remove index <name> but i don't know the name of the index. There doesn't seem to be a command to remove data by source, or I haven't found it. There is other indexed data that I want to leave in place.

So how do I remove the indexes and data for those specific DB Connect inputs that were removed?

[mavidales · Accepted solution]

Figured it out.

source="<yoursource>" | delete

Didn't know you could run those kinds of commands in the search bit. That's neat! Yay!

[martin_mueller]

Note, this does not clear up space but rather mark those events as deleted.