Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
167 results
Sort by:
04-04-2019
06:43 PM
1 Karma
...he past we can't use saved search you to delete selected records from KV Store. Can anyone suggest me the way of deleting selected records (older than 30 days), without manual intervention? Can REST c...
12-05-2013
03:34 PM
A very strange behaviour has occurred, we have defined a saved search that gets stored into its own Summary Index, below is the saved index stanza we have defined,
[Unique GroupId Type]
action.em...
10-20-2016
11:41 AM
We are trying to find a way to leverage the REST API to perform a bulk delete of KV Store records. Currently, the REST API only supports single record deletion or whole KVStore deletion.
I'm w...
12-20-2012
12:09 PM
12 Karma
...ot of interest here.
Does anyone have a straightforward Search for removing duplicates (using |delete) that can take a large number of duplicate records and leave only 1?
03-26-2019
09:59 AM
Is it possible to delete a record from the kvstore through the GUI? I've seen a few ways to delete using curl, but I'm wondering if there are other methods? For my particular case, we have over 60k records...
04-08-2019
04:01 AM
Hi there,
Im trying to make my JS button delete records from the KV store by key id. I can see it grabbing the token in the URL but it doesnt actually delete it. I copied it from the dev t...
05-09-2017
12:19 PM
...es=1 comm="rm" exe="/bin/rm" key="q_etc"
Record 2:
type=PATH msg=audit(1494348060.908:689): item=1 name="passwd" inode=988 dev=ca:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 nametype=DELETE
The t...
02-21-2025
07:12 AM
Hi - Is there a way to Warning the user when try to execute outoutlook up command from front end to avoid deleting accidental records from kvstore. Thank you
Labels
- Labels:
-
using Splunk Enterprise
04-27-2015
12:54 PM
1 Karma
I'm running the free version of Splunk 6.2.2. When I attempt to delete records by sending them to Delete, I get a message that says the items were deleted, and yet when I search for the records, I s...
09-03-2020
03:59 AM
Hello im trying to delete some records from my kvstore collection when running this command (there are more keys i just didnt wanted it to be long) : | inputlookup kv_alerts_prod
| where ( ( _...
Labels
- Labels:
-
kvstore
