Splunk Search

What is the "acl_tag" field that appears under Interesting Fields in the fields sidebar?

Vettaiyan
New Member

Dear All,

Splunk shows acl_tag in search and it was in Interesting Fields. As I'm new to Splunk, I want to know about this kind of stuff. Is there is any link or document to read about this?

Thank you,
Vettai

0 Karma

inventsekar
SplunkTrust
SplunkTrust

maybe, on your search you can add a | fields -acl_tag ("fields", then a minus sign)to remove that acl_tag field from your results.
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/fields

Can you update us your search query please.

Best Regards,
Sekar

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...