Uninstall Splunk manually

If you can't use package management commands, these commands will remove the installed components except for any init scripts that have been created.

1. First, find and kill any process with "splunk" in its name.

For Linux and Solaris: kill -9 `ps -ef | grep splunk | grep -v grep | awk '{print $2;}'`
For FreeBSD and Mac OS: kill -9 `ps ax | grep splunk | grep -v grep | awk '{print $1;}'`

2. rm -rf /opt/splunk (or wherever you installed Splunk)

3. rm -rf /opt/splunkdata (if a datastore or indexes outside the top-level directory exist)

4. userdel splunk

5. groupdel splunk

Previous: Configure SELinux | Next: Upgrade and migrate to 3.3

Comments

No comments have been submitted.