All Apps and Add-ons

Meta Woot!: How to remove old data?

test_qweqwe
Builder

Hi.
After I populate my lookup with hosts, index and sourcetypes I want to remove all this data and populate again, how me do this?
I remove all lookups, but it's not help me, only reinstall app.

For example, after my lookup populated i changed one name of host and in statistic I have old name that not active Index Level - Late or Latency - High because i'm stop use to it, or update name.

I'm using 2.0.4.

Tags (1)
0 Karma
1 Solution

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

View solution in original post

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...