Splunk ES APP Notables Events lookup clean

sumitkathpal · ‎07-03-2017

Hi All,

Need help, We recently enable few alerts for testing which results into notable events . Now we have cleared the index=notable . All results got cleared but micro incident_review is updated and incident_reviewstill show the old notable events count.

Can any one help to flush this micro lookup incident_review?

Thanks in advance

sumitkathpal · ‎07-04-2017

Any help?

Splunk ES APP Notables Events lookup clean

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Splunk ES APP Notables Events lookup clean

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever