Is it possible to modify a log that has already been indexed?

[jrodriguezap]

Hi?
Is it possible to modify a record that has already been indexed?
Or failing that, delete it and write another with the same _Time

[Damien_Dallimor]

You can not update already indexed data.

You can soft delete a specific event with the delete search command

More info here