I wanna delete Events from an indexer (x).
First of all, I added "deletebykeyword" capability for admin then I wrote :
index=x suid=th:0 |eval index="x" |delete
in the search& report app
" error: you don't have capability to delete from index x"
How can I solve it?