Splunk Search

How to clear search history?

louisjannett
Engager

Hi everyone,
I have a short question in regard to my search history. How can I clear the entire search history of a specific user or of all users?

The suggested file in this post (https://answers.splunk.com/answers/6159/how-do-i-clear-my-search-history.html?utm_source=typeahead&u...) does not exist in my log directory. In addition, the searchhistory.log file in var/log/splunk is empty.

Thanks in advance!

1 Solution

horsefez
Motivator

Hi @louisjannett,

I bet you are searching in the wrong directory.
Each user has it's own private search history.

Try finding it at the following path

/opt/splunk/etc/users/<nameofuser>/search/

Hope this helps!

View solution in original post

horsefez
Motivator

Hi @louisjannett,

I bet you are searching in the wrong directory.
Each user has it's own private search history.

Try finding it at the following path

/opt/splunk/etc/users/<nameofuser>/search/

Hope this helps!

louisjannett
Engager

Thanks! I didn't look for that directory.

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...