I've been playing around with Splunk and got some questions:
I have installed it using
rpm -iv splunk-7.2.3-06d57c595b80-linux-2.6-x86_64.rpm
I removed it next using
rpm -e splunk-7.2.3-06d57c595b80.x86_64
My question is, why didn't rpm
remove the Splunk user from /etc/passwd ? Also I'm a bit puzzled why removing via splunk-7.2.3-06d57c595b80-linux-2.6-x86_64.rpm
did not work (but the installation did) and I had to get the actual package name with rpm -qa | grep splunk
first?
Is this related to the Splunk
rpm
package or rather standard?
.rpm
part of the package when removing it viarpm -e
.