All Apps and Add-ons

How to remove the duplicates from index in continuous monitoring?


I have added one text file for continuous monitoring. The data's getting duplicated in the same index eventhough data's are added or removed or for no change in text file also. How to remove duplicates from index without using dedup command?

0 Karma

0 Karma
Get Updates on the Splunk Community!

Security Highlights: September 2022 Newsletter

 September 2022 The Splunk App for Fraud Analytics (SFA) is now Splunk SupportedUse your existing Splunk ...

Platform Highlights | September 2022 Newsletter

 September 2022 What’s New in 9.0 and How to UpgradeGet a walk through of what is new Splunk Enterprise 9.0 ...

Observability Highlights | September 2022 Newsletter

 September 2022 Splunk Observability SuiteAccess to "Classic" SignalFx Interface Will be Removed on Sept 30, ...