Скачать или смотреть How to clean the Index in Indexer Cluster.mp4

How to Clean the Index in Indexer Cluster?

Steps to Clean the Index in Indexer Cluster

Connect to Cluster Manager instance (via SSH client)

Login as a Splunk user

Navigate to “_cluster/local” folder

Open indexes.conf file

Add stanza like below in the indexes.conf

In Cluster Manager node itself, execute below command in CLI

Enter username & Password

Once you confirm, if the restart is necessary

To apply the configuration bundle to the peers, run this CLI command

Login to any one of the search head server with your credentials.Run below query

If you don’t find any results or “0”, then the data has been cleaned

This method is not officially mentioned in any Splunk documentation.

It is purely based on our experience. Trying this in your production environment is at your own risk.


#splunk #splunklife #splunkblogs #splunkers #splunkadmin #splunkdeveloper #interviewquestions #splunkusecases #softmania #splunkmania