How to Bulk Delete Duplicate Entities

TylerJVitale · ‎10-21-2019

In the ITSI health check dashboard, it found almost 700 duplicate entities, and I couldn't find any references on how best to handle this.

Is there an efficient way to delete all the extra copies?

esnyder_splunk · ‎10-21-2019

Hi Tyler, please see the bulk delete instructions here: https://docs.splunk.com/Documentation/ITSI/latest/Configure/Deleteentities

TylerJVitale · ‎10-22-2019

I've looked at that and it only shows how to delete duplicates from SAI, which is not an issue in my instance, or how to disable recurring entity import searches, not how to delete the duplicate entities that have already come in

How to Bulk Delete Duplicate Entities

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation

How to Bulk Delete Duplicate Entities

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...