https://community.splunk.com/t5/Getting-Data-In/How-to-delete-specific-event/m-p/59467#M11721 <P>Hello,</P> <P>How can I delete some specific event in Splunk? For example, one log loaded in splunk with 50 events, and I want to delete one or two events in them.</P> Tue, 11 Dec 2012 11:52:43 GMT ford1863 2012-12-11T11:52:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-delete-specific-event/m-p/59467#M11721 <P>Hello,</P> <P>How can I delete some specific event in Splunk? For example, one log loaded in splunk with 50 events, and I want to delete one or two events in them.</P> Tue, 11 Dec 2012 11:52:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-delete-specific-event/m-p/59467#M11721 ford1863 2012-12-11T11:52:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-delete-specific-event/m-p/59468#M11722 <P>Use the <CODE>delete</CODE> operator.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Delete">http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Delete</A></P> <P>Note that you need the <CODE>can_delete</CODE> privileged in order to be able to use this, and by default no roles (not even admin) have this privilege, so you'll need to add it before you can use this command.</P> Tue, 11 Dec 2012 11:58:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-delete-specific-event/m-p/59468#M11722 Ayn 2012-12-11T11:58:54Z