Hi,
we're using the free license of splunk and are very happy with it. Unfortunately, our application ran into this bug (https://issues.apache.org/bugzilla/show_bug.cgi?id=44178) which caused our search index to be flooded with exception logs. Due to that our search is now disabled because the splunk index is too large. Is there a way to delete these exceptions from the index to bring it below the limit again? Since I don't want to loose the other logs I can't delete the complete index. I can't use the delete command in the search, because the search is disabled due to the license violation.
Is there any way to do this?
Thanks
... View more