I know you can delete KVStore via the command line : https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/kvstore/usetherestapitomanagekv/
Is it possible to delete from the splunk search line? I tried using the following but it doesn't work.
| rest /servicesNS/nobody/search/storage/collections/data/my_collection
I also tried installing the Webtools TA app to get access to being able to send external api requests but it says I'm unauthorized:
| curl method=get user="" password="" uri=https://host:8089/servicesNS/nobody/search/storage/collections/data/my_collection
The Webtools TA app uses python requests and I'm able to get a 200 when I make the request from a python script.
This could be done via the restapi using curl -- your link to the documentation provides a few examples how to do this. The syntax for curl is slight diifferent in windows, let me know if you need help with this.
Yes I know I can delete using the rest api.
I want to know if it can be done from the splunk search line either using the rest command or with an app that enables you to send api requests.