Remove indexes and indexed data:
splunk stop splunk clean eventdata -index _internal -f
See search history -
- allinurl/goaccess: GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
- rcoh/angle-grinder: Slice and dice log files on the command line
- antonmedv/red: Terminal log analysis tools – “Pipe JSON stream logs into red and specify a few fields to display. You will see combined logs with trend sparkline and total count.”