https://community.splunk.com/t5/Getting-Data-In/Removing-Blank-Empty-events-with-Splunk/m-p/107832#M22665 <P>I have indexed a file that contains a number of blank event s with a timestamp, my goal is to remove those blank/Empty events by grouping them up and then "| delete" , what's the best way of doing this?</P> <P>Note: these empty events have timestamp</P> Tue, 03 Apr 2012 06:32:50 GMT Dark_Ichigo 2012-04-03T06:32:50Z https://community.splunk.com/t5/Getting-Data-In/Removing-Blank-Empty-events-with-Splunk/m-p/107832#M22665 <P>I have indexed a file that contains a number of blank event s with a timestamp, my goal is to remove those blank/Empty events by grouping them up and then "| delete" , what's the best way of doing this?</P> <P>Note: these empty events have timestamp</P> Tue, 03 Apr 2012 06:32:50 GMT https://community.splunk.com/t5/Getting-Data-In/Removing-Blank-Empty-events-with-Splunk/m-p/107832#M22665 Dark_Ichigo 2012-04-03T06:32:50Z https://community.splunk.com/t5/Getting-Data-In/Removing-Blank-Empty-events-with-Splunk/m-p/107833#M22666 <P>I figured it out, as created a Regex that would locate a great amount of spaces after the timestamp into its own field, then I would search everything discarding that Field.</P> Tue, 03 Apr 2012 06:47:29 GMT https://community.splunk.com/t5/Getting-Data-In/Removing-Blank-Empty-events-with-Splunk/m-p/107833#M22666 Dark_Ichigo 2012-04-03T06:47:29Z