How to force a splunk instance to re index a file that has already be - ProProfs Discuss
Advertisement

How to force a splunk instance to re-index a file that has already be indexed?



Asked by Wyatt Williams, Last updated: May 14, 2024

+ Answer
Request
Question menu
Vote up Vote down

3 Answers

C. Perez

C. Perez

Just getting better day by day

C. Perez
C. Perez, Writer, Writer, Cleveland

Answered Aug 01, 2019

Splunk clean eventdata -index _fishbucket. A Splunk instance is used in the software Splunk. This software is used to analyze, search, and monitor data. These processes are done through a Web interface. A Splunk instance gets data from a forwarder and then writes this data to a disk.

These instances can work as standalone and with other indexers. Splunk instances can also work as a search interface. One many see the term in documents, used to distinguish from a forwarder. There are many Splunk instances, which include indexers, deployment servers, search heads, and heavy forwarders.

upvote downvote
Reply 

M. Klose

M. Klose

M. Klose
M. Klose, Content Writer, Oakland

Answered Sep 11, 2018

Although you can add new types to a type, you can't add new analyzers to make changes to existing fields. If you were to do so, the information that had already been indexed would be erroneous and your inquiries would no longer work as anticipated.

The easiest way to relate these changes to your existing statistics is to reindex. Make a new index with the new settings and copy all your documents from the old index to the new one. To reindex all the records from the old index, and then push them into the new index.

upvote downvote
Reply 

Wyatt Williams

Wyatt Williams

Wyatt Williams
Wyatt Williams

Answered Mar 27, 2018

"splunk clean eventdata -index _fishbucket"
upvote downvote
Reply 

Advertisement
Advertisement
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader
Image Preview
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader
Image Preview
Search for Google images Google Image Icon
Select a recommended image
Upload from your computer Loader

Email Sent
We have sent an email to your address "" with instructions to reset your password.