We are using Field Filters on Splunk Cloud. Currently, our configuration uses the Replacement method with a string. If I delete or remove this configuration, will the replaced data be visible normally again?
Hi @phamanh1652
Yes - the field filters apply at search time and therefore do not affect the underlying data, this means that when you remove the existing field filter it will revert the returned data to the original underlying view.
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing