How can I delete an IP address from the database? I have devices that have been removed but the entries will still hang on for 3 months in the database.
the fastest way is to delete events like this:
yourFancySearchToGetTheIPs | delete
This will make the events non-searchable, but they are still in the index.
There are as well other ways, like move the events to a new index and delete the hole index....but I think the | delete command is a nice and easy way.
hope this helps ...