How to clean the Index in Indexer Cluster.mp4
How to Clean the Index in Indexer Cluster?
Steps to Clean the Index in Indexer Cluster
Connect to Cluster Manager instance (via SSH client)
Login as a Splunk user
Navigate to “_cluster/local” folder
Open indexes.conf file
Add stanza like below in the indexes.conf
In Cluster Manager node itself, execute below command in CLI
Enter username & Password
Once you confirm, if the restart is necessary
To apply the configuration bundle to the peers, run this CLI command
Login to any one of the search head server with your credentials.Run below query
If you don’t find any results or “0”, then the data has been cleaned
This method is not officially mentioned in any Splunk documentation.
It is purely based on our experience. Trying this in your production environment is at your own risk.
#splunk #splunklife #splunkblogs #splunkers #splunkadmin #splunkdeveloper #interviewquestions #splunkusecases #softmania #splunkmania
Want to become expert in Splunk SIEM ???
Here is the 4 stage roadmap (With Live Projects) to gain real-time experience
Stage-1: Learn IT basics & Security Essentials To Learn those topics, Watch below videos for free
1) • Day-1 | Batch-1 | CyberSecurity - Introduc...
2) https://www.youtube.com/live/hVCKZKwB...
3) https://www.youtube.com/live/sUU3wDGj...
4) https://www.youtube.com/live/knrtIdqK...
Stage-2: Learn Splunk basics To Learn those topics, Register for this beginner bootcamp for free Link:
https://splunk.softmania.in/course/fr...
Stage-3: Do 10+ Live Splunk Projects To do these projects, enroll for this Intermediate bootcamp Link:
https://splunk.softmania.in/session/s...
Stage-4: Learn Splunk Architect topics To do these projects, enroll for this Expert bootcamp Link:
https://splunk.softmania.in/course/so...
Need help in deciding?? - DM us on WhatsApp - http://wa.me/918317349618