The Splunk KV Store REST API provides distinct endpoints for managing records. A DELETE request sent to the endpoint that includes a specific key (e.g., .../storage/collections/data/{collection}/{key}) will delete only that single record. However, if the key is omitted from the endpoint URL, the DELETE request is sent to the collection's base endpoint (e.g., .../storage/collections/data/{collection}). This is a valid and intentional API operation that instructs Splunk to delete all records within that specific collection, effectively clearing its contents.

A. Clean the KV store, deleting all content.

This is incorrect because the DELETE operation is scoped to a specific collection named in the endpoint, not the entire KV store.

B. Produce the syntax error “Key value missing”.

This is incorrect because omitting the key is a valid syntax for a bulk delete operation on the collection and does not result in an error.

D. Mean that the key value must be passed as an argument.

This is incorrect. For single-record deletion, the key is part of the URL path. For collection-wide deletion, no key is required at all.

1. Splunk Enterprise REST API Reference Manual:

Endpoint: storage/collections/data/{collection}

Method: DELETE

Description: "Deletes all records in a collection." This explicitly confirms that a DELETE request to the collection endpoint without a key deletes all records.

Source: Splunk Enterprise 9.2.1

REST API Reference Manual

"storage/collections/data/{collection}" section.

2. Splunk Developer Guide:

Section: Use the KV Store > KV Store REST endpoints

Content: The documentation lists the endpoint DELETE /servicesNS/{user}/{app}/storage/collections/data/{collection} with the description "Deletes all records from the collection." It contrasts this with DELETE /servicesNS/{user}/{app}/storage/collections/data/{collection}/{key}

which "Deletes a single record from the collection."

Source: Splunk Developer Documentation

Developing for Splunk Cloud Platform and Splunk Enterprise

"Use the KV Store" chapter.