I would like to delete all the data in an index from an indexer cluster without restarting the indexers.
Replication factor= 2 and search factor = 2.
Restarting the indexers causes the cluster master to reassign primaries to available searchable bucket copies. Since my system uses accelerated data models, which are not replicated, all the re-assigned primary buckets need to have their data model re-accelerated. In a large production system, this can take a considerable amount of time.
I am running Splunk V.6.2.3
↧