I recently installed Splunk on my Fedora 12 machine. It is not working properly and I also don't like where I installed it which was in my downloads folder some how.

I cannot figure out how to uninstall this package and the Splunk Doc's are pretty weak.

Any help appreciated.

Thanks,

-Chris

Did you install it using your package manager?

To be honest I am not sure. I think I used the GUI install process (I am guessing that is the Package Installer) yes, I think I did use that.

OK, I found where I can ADD/REMOVE software but I don't see Splunk in there. I may have installed it thru terminal because I vaguely remember that I didn't have access to install it thru the package installer. I do not know how to get root access that way, only in terminal. I think I need linux for dummies.

If you use the package manager to install it than you also can use the package manager to uninstall it
But you can also do it from the cli as root
T obecome root type in the terminal su enter
root password enter
yum remove package name

WHat do you see if you run "rpm -qi splunk"?

Is there a way I can find out what the package name is?

Try yum erase splunk.

If you could choose where to install it - I very much doubt that you installed it using a package manager, which usually decides for itself where to install files.
*How* did you install the application? From source, using yum and an external repository or an .rpm file?

However, as I suggested earlier, if you installed a package on a RedHat-based system using rpm or yum, you should be able to query the RPM database for the package using "rpm -qi <package name>".

Lets see if we can work out exactly how you put it on there if the above don't work. At a terminal, see what comes out of
(We're hoping that you did do this in the terminal as you thought you may have done, in your post of 20minutes ago)

Here is the outcome of that command. I did not install it today sooo....

[root@FedoraBox bin]# history | grep splunk
9 cd splunk
11 splunk start
12 ./splunk start
16 ./splunk start
19 ./splunk start
47 cd splunk
50 ./start splunk
51 ./splunk start
52 ./splunk display app all
53 ./splunk display app
80 /start splunk
81 ./start splunk
82 splunk
253 cd home/kryznic/Downloads/opt/splunk/bin
260 cd splunk/bin
262 ./start splunk
264 ./splunk
266 splunk
267 /.splunk
268 ./splunk
269 ./splunk cheatsheet
270 ./splunk help
271 ./splunk help simple
272 ./splunk help command
273 ./splunk help commands
275 ./splunk restart
285 splunk
286 /start splunk
287 ./start splunk
288 ./splunk
290 splunk restart
291 ./ splunk restart
292 ./splunk command
293 ./splunk help commands
294 ./splunk restart|splunkd
295 ./splunk restart splunkd
296 ./start splunkd
298 catg splunkd
299 splunkd
300 cd splunkd
301 /start splunk
302 splunk start
303 start splunk
304 ./start splunk
305 ./splunk start
306 yum update splunk
307 rpm --e splunk-2.1-0
308 userdel splunk
309 groupdel splunk
322 rpm -i splunk-4.0.9-74233.i386.rpm
323 rpm -u splunk-4.0.9-74233.i386.rpm
324 rpm -U splunk-4.0.9-74233.i386.rpm
327 cd opt/splunk/bin
328 ./splunk stop
329 rpm -e splunk-4.0.9-74233.i386.rpm
330 /.start splunk
331 ./start splunk
332 splunk
333 ./splunk stsart
334 ./start splunk
335 ./splunk start
336 rpm -ql splunk-4.0.9-74233.i386.rpm | grep bin
337 yum remove splunk-4.0.9-74233.i386.rpm
338 rpm remove splunk-4.0.9-74233.i386.rpm
339 rpm -e splunk-4.0.9-74233.i386.rpm
340 yum install splunk-4.0.9-74233.i386.rpm
342 yum erase splunk
343 history | grep splunk


Additionally RPM & YUM says

[root@FedoraBox bin]# rpm -e splunk-4.0.9-74233.i386.rpm
error: package splunk-4.0.9-74233.i386.rpm is not installed
[root@FedoraBox bin]# yum install splunk-4.0.9-74233.i386.rpm
Loaded plugins: presto, refresh-packagekit
Setting up Install Process
No package splunk-4.0.9-74233.i386.rpm available.
Nothing to do


but I know something is installed because I can still run it.

Is linux really this confusing or am I just to used to Windows? (I know there are no similiarities)

I don't think you've actually installed it

Try typing just "rpm -e splunk" omitting the version stuff.

Well, we'd know for sure if I wasn't talking to myself and the OP had run "rpm -qi splunk" and told us the output...

Quite