Knowledge Management

How to remove entry from kvstore?

jwhughes58
Contributor

I’m working with a kvstore since the Netskope IP information needs updating.  I figured out how to add to it using this SPL

 

 

| makeresults
| eval Data="aaa.bbb.ccc.ddd/mask"
| eval Desc="Netskope"
| eval Type="netskope_ip"
| outputlookup append=true override_if_empty=false my_kvstore

 

 

I found multiple examples of how to delete

curl -k -u admin:yourpassword -X DELETE https://localhost:8089/servicesNS/nobody/kvstoretest/storage/collections/data/kvstorecoll/5410be5441...

The thing is I can’t find the data path.  I can’t use the above command replacing the path the correct path if I can’t figure out the correct path.  Any suggestions?

TIA,

Joe

Labels (1)
0 Karma
1 Solution

jwhughes58
Contributor

Thanks.  My googlefu didn't find that one.  Part 2 had the command I was looking for.

| inputlookup task_lookup | eval key=_key | WHERE NOT key=<specific_id> | 
outputlookup task_lookup

 Thanks for the help.

Joe

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...