I've been playing around with Splunk and got some questions:
I have installed it using
rpm -iv splunk-7.2.3-06d57c595b80-linux-2.6-x86_64.rpm
I removed it next using
rpm -e splunk-7.2.3-06d57c595b80.x86_64
My question is, why didn't
rpm remove the Splunk user from /etc/passwd ? Also I'm a bit puzzled why removing via
splunk-7.2.3-06d57c595b80-linux-2.6-x86_64.rpm did not work (but the installation did) and I had to get the actual package name with
rpm -qa | grep splunk first?
Is this related to the
rpm package or rather standard?