Hi Team,
I have 2 sources & have 12 months of data in DB connect app , Can we hide particular month of data in DB connect app.Thanks
Regards
Mahesh
Hi Mahesh,
please have a look at this answer https://answers.splunk.com/answers/148270/transforms-conf-hide-values-or-make-them-anonymous.html
Hope this solution answers your question?
Greetings
Jacob
Hi Jacob,
Do you mean that if we hide Period="Oct-14" with help of Props.conf , then it will not show data for this period ?
Regards
I want to hide entire all events which comes for Period =oct-14
Hi Mahesh,
can you show me a screenshot of your case?
Hi Jacob,
Below is event, I want to hide data for Period 0ct, this is Indexed data.
2018-12-16 22:26:17.620, Sysdate="2018-12-18 22:00:02.0", Period="Oct-14" , Test_type="12345", Name="USA", Type="Interest"
2018-12-16 22:26:17.620, Sysdate="2018-12-18 22:00:02.0", Period="Nov-14" , Test_type="12345", Name="USA", Type="Interest"
If i run command below commands it should not show data for period oct 2014
index=type_2 sourcetype=historic