How can I remove one record from the KV store using a search without reloading the whole thing?

[okrabbe_splunk]

How can I remove one record from the KV store using a search without reloading the whole thing?

For example, I know I can do the following

|inputlookup my_lookup | search NOT _key="123345" | outputlookup my_lookup

Is there a more efficient method?

[AkshayPI]

In CLI, run this:

curl -k -u user:pass -X DELETE \
    https://localhost:8089/servicesNS/yourusername/yourappname/storage/collections/data/kvstorecollectio...

Here, the "kvstorecollection" is the name of the KV store collection that you defined in collections.conf

Cheers,
Akshay