topic Re: how delete a data from an index in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274320#M3435 <P>You get the same error with your new role (which has can_delete capability)?</P> Fri, 27 May 2016 19:00:26 GMT somesoni2 2016-05-27T19:00:26Z how delete a data from an index https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274317#M3432 <P>I try to delete data but it does not work and show me this message Error in 'delete' command: You have insufficient privileges to delete events. So I create a user who has the the "delete_by_keyword" capability with the role can_delete but it does not work eigther.</P> Tue, 29 Sep 2020 09:49:16 GMT https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274317#M3432 amyculquer 2020-09-29T09:49:16Z Re: how delete a data from an index https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274318#M3433 <P>You have a role called "can_delete". Just add it to you user. </P> Fri, 27 May 2016 13:33:22 GMT https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274318#M3433 diogofgm 2016-05-27T13:33:22Z Re: how delete a data from an index https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274319#M3434 <P>I did that, but it does not work</P> Fri, 27 May 2016 18:25:18 GMT https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274319#M3434 amyculquer 2016-05-27T18:25:18Z Re: how delete a data from an index https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274320#M3435 <P>You get the same error with your new role (which has can_delete capability)?</P> Fri, 27 May 2016 19:00:26 GMT https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274320#M3435 somesoni2 2016-05-27T19:00:26Z Re: how delete a data from an index https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274321#M3436 <P>Yes, I create the user named deleted which has the role of can_delete , this role is already enabled by keyword delete and still does not work and show me the error mensagge You have insufficient privileges to delete events.</P> Fri, 27 May 2016 19:56:53 GMT https://community.splunk.com/t5/Splunk-Dev/how-delete-a-data-from-an-index/m-p/274321#M3436 amyculquer 2016-05-27T19:56:53Z