All Apps and Add-ons

Is there a way to ignore days on Azure blob with Splunk Add-on for Microsoft Cloud Services?

jscraig2006
Communicator

I changed my Splunk environment in Azure to new servers including search peers. Is there a way to ignore days for the Azure Blob input? I have tried to use IgnoreOlderThan and it complained. It appears that this has to re-read the whole entire container.

Thanks,

~John

0 Karma
Get Updates on the Splunk Community!

Transforming Financial Data into Fraud Intelligence

Every day, banks and financial companies handle millions of transactions, logins, and customer interactions ...

How to send events & findings from AWS to Splunk using Amazon EventBridge

Amazon EventBridge is a serverless service that uses events to connect application components together, making ...

Exciting News: The AppDynamics Community Joins Splunk!

Hello Splunkers,   I’d like to introduce myself—I’m Ryan, the former AppDynamics Community Manager, and I’m ...