Hello,
As an admin, I tried to delete a lookup table file. I had copied all the apps back to the search head cluster deployer, including the lookup tables files for all the apps and then pushed the updated bundle, to get the deployer back into a current state.
In doing so, I apparently made the lookup tables not able to be deleted as the option no longer appears.
So I tried to use curl
to delete them but that fails to with
Object id=LookupName.csv cannot be deleted in config=lookups
Thanks for the assistance!
This seems to be working for me:
$SPLUNK_HOME/bin/splunk clear kvstore -app <your_app_name> -collection <collection_name>
Hi @tkw03 ,
Did you find any solution for your problem?
Thanks.