delete metrics data

kutsyy · ‎11-28-2017

I am trying to figure out how to delete metrics data. "| delete" doesn't work with mstats, is there another way?

Thanks,

Vadim

rjthibod · ‎11-28-2017

You have to clear out the whole index (bin\splunk clean eventdata ...), or, more unsafely, delete the buckets/directories from the file system containing the bad data.

As of now, there is no supporting of the delete command. See my rantings here: https://answers.splunk.com/answers/579720/should-metrics-indexes-support-overwriting-events-1.html

delete metrics data

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

[Puzzles] Solve, Learn, Reuse: Word-play

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

Best Practices: Splunk auto adjust pipeline queue

Join the Conversation

delete metrics data

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

[Puzzles] Solve, Learn, Reuse: Word-play

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

Best Practices: Splunk auto adjust pipeline queue