All Apps and Add-ons
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Is there a way to ignore days on Azure blob with Splunk Add-on for Microsoft Cloud Services?

jscraig2006
Communicator
‎03-27-2020 10:17 AM

I changed my Splunk environment in Azure to new servers including search peers. Is there a way to ignore days for the Azure Blob input? I have tried to use IgnoreOlderThan and it complained. It appears that this has to re-read the whole entire container.

Thanks,

~John

0 Karma
Reply
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...