Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
3,000 results
Sorted by:
03-26-2021
12:41 AM
Hi, There is an alarm monitoring the 4733(A member was removed from a security-enabled local group ) events. When this alarm is triggered, I want the user to be deleted from the users.cvs l...
Labels
- Labels:
-
alert action
-
other
02-24-2021
02:20 AM
Is there a way to automatically delete some containers within a playbook?
- Tags:
- phantom
Labels
- Labels:
-
using Phantom
Show results in replies (5)
-
...alkthough on how to use this as HTTP DELETE is a standard capability which is made available to you on P...
-
@drew19 yes, but you have to use REST and a HTTP DELETE request to the container endpoint (D...
-
...annot find any reference to DELETE requests in the link provided by you. Where it is written? T...
-
@drew19 i meant a HTTP DELETE request to the endpoint (e.g. /rest/container/100). This a...
-
...hen press CTRL + F (find something in the page) then look for "DELETE": there are no results. My q...
01-11-2021
01:04 PM
Hey guys I've been having trouble finding documentation about removing indexed data. After looking through the "meta woot!" app I saw my hosts were growing a few thousand a day and my estreamer app ...
Labels
- Labels:
-
host
01-22-2021
07:42 AM
...axDataSize" parameters slightly before (like a day) so "frozentimeperiodinsecs" can then pull from the warm bucket to delete? Thank you in advance
Labels
- Labels:
-
administration
-
configuration
06-16-2019
09:55 PM
There could be tens to hundreds of containers that would like to be deleted. What is the best way to delete these?
- Tags:
- phantom
Labels
01-16-2018
02:55 AM
...dmin user of SH, and executed delete command on SH.
However, despite all the data of indexer 1 being displayed as "deleted", all the data of indexer 2 was "errors".
Also, the following error m...
Show results in replies (5)
-
hope the indexers are not clustered, right. One more thing....were you trying to delete data f...
-
...nd delete it...
-
Thank you for comment! First, my indexers are not clustered. Second, I excuted delete with t...
-
Ohk sure. So, the issue is that, when you ran first, you got error.. on second run, delete worked f...
-
The reason this most likely failed on the 2nd indexer is that your authorization change may have ye...
12-05-2019
12:33 AM
Hello,
I am trying to create and delete some deep dives view via the API.
While creating them is mostly done correctly (although they do not appear in the web GUI), I have issues deletting t...
12-20-2012
12:09 PM
12 Karma
...owever, |delete won't work after a non-streaming command, so actually removing the the events as described won't work.
Yes, dedup works fine….except in cases where you have an oops and all of y...
Show results in replies (9)
-
d and watsm10 have it right. We must first build a list of events to delete and separately delete...
-
2) review what we're going to delete | inputlookup delete_these.csv 3) enable delete c...
-
5) remove delete capability (through UI or CLI) to prevent unauthorized or accidental deletions
-
...nterested in. Run your searches on the summary. c. Use | delete in the long and non-trivial w...
-
...trick is to first find the events and then use it as a subquery to find this events, as you can't delete...
-
...ount!=1 | eval delete_id=_cd."|".index."|".splunk_server | stats count by delete_id | fields - count | o...
-
This solution should delete every duplicate value. You will need one unique field in your index o...
-
Thanks Brian! Is "fields | format" more efficient than "table"? I mean, why not just "table delete...
-
1) mark for delete note that we create a tuple that uniquely identifies the event with eval id=....
04-23-2020
06:33 AM
Is it possible to restore a deleted lookup table and its related lookup definition / automatic lookup?
Labels
- Labels:
-
lookup
