All Apps and Add-ons

Meta Woot!: How to remove old data?

test_qweqwe
Builder

Hi.
After I populate my lookup with hosts, index and sourcetypes I want to remove all this data and populate again, how me do this?
I remove all lookups, but it's not help me, only reinstall app.

For example, after my lookup populated i changed one name of host and in statistic I have old name that not active Index Level - Late or Latency - High because i'm stop use to it, or update name.

I'm using 2.0.4.

Tags (1)
0 Karma
1 Solution

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

View solution in original post

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

Get Updates on the Splunk Community!

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...