Hi.
After I populate my lookup with hosts, index and sourcetypes I want to remove all this data and populate again, how me do this?
I remove all lookups, but it's not help me, only reinstall app.
For example, after my lookup populated i changed one name of host and in statistic I have old name that not active Index Level - Late
or Latency - High
because i'm stop use to it, or update name.
I'm using 2.0.4
.
Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot
should wipe the KV store too.
Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot
should wipe the KV store too.