Splunk Search

Need to hide data in DB connect

rakesh44
Communicator

Hi Team,

I have 2 sources & have 12 months of data in DB connect app , Can we hide particular month of data in DB connect app.Thanks

Regards
Mahesh

Tags (1)
0 Karma

hijacob
Communicator

Hi Mahesh,

please have a look at this answer https://answers.splunk.com/answers/148270/transforms-conf-hide-values-or-make-them-anonymous.html

Hope this solution answers your question?

Greetings
Jacob

0 Karma

rakesh44
Communicator

Hi Jacob,

Do you mean that if we hide Period="Oct-14" with help of Props.conf , then it will not show data for this period ?

Regards

0 Karma

rakesh44
Communicator

I want to hide entire all events which comes for Period =oct-14

0 Karma

hijacob
Communicator

Hi Mahesh,

can you show me a screenshot of your case?

0 Karma

rakesh44
Communicator

Hi Jacob,

Below is event, I want to hide data for Period 0ct, this is Indexed data.

2018-12-16 22:26:17.620, Sysdate="2018-12-18 22:00:02.0", Period="Oct-14" , Test_type="12345", Name="USA", Type="Interest"

2018-12-16 22:26:17.620, Sysdate="2018-12-18 22:00:02.0", Period="Nov-14" , Test_type="12345", Name="USA", Type="Interest"

If i run command below commands it should not show data for period oct 2014

index=type_2 sourcetype=historic

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...