Getting Data In

How do i delete host

vaibhavbeohar
Path Finder

How do i delete host, sourcetype and source from splunk..
have tried following option,i am able to remove index but i want to delete host, sourcetype and source from the home page(dashboard)

*host="Vaibhav-PC" | delete
sourcetype="IIS" | delete
source="C:\Users\Administrator\Desktop\W3SVC2.zip:.\u_ex120227.log" | delete
*

after removing have restarted splunk,but no sucess

Thanks,

Tags (1)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi vaibhavbeohar

| delete

does not delete data, it marks it as unsearchable so it will not appear again in any search. If you want to delete indexed data you can read the docs and proceed like described.

cheers

Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...