All Apps and Add-ons

Meta Woot!: How to remove old data?

test_qweqwe
Builder

Hi.
After I populate my lookup with hosts, index and sourcetypes I want to remove all this data and populate again, how me do this?
I remove all lookups, but it's not help me, only reinstall app.

For example, after my lookup populated i changed one name of host and in statistic I have old name that not active Index Level - Late or Latency - High because i'm stop use to it, or update name.

I'm using 2.0.4.

Tags (1)
0 Karma
1 Solution

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

View solution in original post

pj
Contributor

Meta Woot! 2.1 and above has a search to enable you to remove stale data from the KV store after a certain number of seconds. The seconds are definable by the user in a macro. You could take that search and simply run it using 0 seconds to wipe the entire KV store. Alternatively simply running | outputlookup meta_woot should wipe the KV store too.

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...