Hi,
I need to delete some indexes that I created when testing our new distributed Splunk deployment.
Is it as easy as:
1. Remove the indexes I want to delete from the `/opt/splunk/etc/master-apps/_cluster/local/indexes.conf` file on the master node
2. Apply the configuration bundle from the Web UI on the master node: *Settings > Index Clustering > Edit > Distribute Configuration Bundle*
3. Remove the index directories on all the indexers `rm -rf /path/to/index/directory`
I didn't find any documentation about this specific use case. Hope you guys can help me out.
↧