#!/bin/bash

echo "staring script"

if [ ! -f Hosts.data ]
then
  echo "script must has to run from $SPLUNK_HOME/var/lib/splunk/defaultdb/db/"
  exit 1
fi

echo "making backup of Hosts.data -> Hosts.data.org"
mv Hosts.data Hosts.data.org

echo "sorting and making new Hosts.sorted file"
sort -r -n -k 3 Hosts.data.org | head -10000 > Hosts.sorted

echo "renumbering the file"
cut -f 2- Hosts.sorted > Hosts.numbered
awk '{printf "%s\t%s\n",NR,$0}' Hosts.numbered > Hosts.data

echo "cleaning up"
rm Hosts.sorted Hosts.numbered

echo "done. please start splunk"