Splunk Cloud Platform

How to remove host(Default field) field from Splunk Cloud permanently?

sc_admin11
Explorer

I want to remove host(Default field) field from splunk cloud permanently .Since we don't need the host field in our search results.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The host field cannot be removed.  It's a default and important field for Splunk.  If you don't want it in your results then add

| fields - host

to your queries.

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...