All Apps and Add-ons

Delete IP address from database

New Member

How can I delete an IP address from the database? I have devices that have been removed but the entries will still hang on for 3 months in the database.

Tags (2)
0 Karma

SplunkTrust
SplunkTrust

Hi cgraham1,

the fastest way is to delete events like this:

 yourFancySearchToGetTheIPs | delete

This will make the events non-searchable, but they are still in the index.

There are as well other ways, like move the events to a new index and delete the hole index....but I think the | delete command is a nice and easy way.

hope this helps ...

cheers, MuS