We have had Splunk implemented at my company for quite a few years. A new VP has taken over and he no longer wants to use it, and another department now wants to utilize Splunk. The old data is worthless. Would it be easier to delete the data, inputs, and most of the config, or reinstall/redeploy? If the latter, do I even have to mess with deleting the data out of Splunk? Either way, a lot of work needs to be done and I'd rather work smarter not harder.
It should be noted that the Splunk version is at 6.0 and would need to be upgraded anyway.
Thanks!
↧