All Apps and Add-ons
Highlighted

Is there a way to ignore days on Azure blob with Splunk Add-on for Microsoft Cloud Services?

Communicator

I changed my Splunk environment in Azure to new servers including search peers. Is there a way to ignore days for the Azure Blob input? I have tried to use IgnoreOlderThan and it complained. It appears that this has to re-read the whole entire container.

Thanks,

~John

0 Karma