About matiasruiz

matiasruiz · ‎06-05-2018

I want to just mask that field value. And where can I read more about that summary indexing?, sounds like I could transform the data on the fly?

matiasruiz · ‎06-05-2018

for GDPR compliance I need to modify a ClientIP field that is already indexed (4+ year so far) and wipe it. Was thinking on dumping the whole index and load it to a different one, but that will blow my license with just a couple of days of data. As it seems is not possible to delete it from index, there is any chance of hiding it from all queries or change its value globally? thanks.

matiasruiz · ‎05-24-2016

We have been contacted by Google as our Splunk is using the Google Maps app connecting to their API on our intranet. As we really barely use it, I want to remove that App. I was able to disable it from the splunkmaster only, but not from the search heads. There is not a "disable" link there. Any idea how to do this? For now, I disable the objects that use it, but I want to be 100% sure the App will remain disabled everywhere.

Posts	3
Solutions	0
Karma Given	0
Karma Received	2
Member Since	‎09-12-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Can an already indexed field be hid globally since...

How to remove the Google Maps Add-on from my Splun...

Re: As an already indexed field can't be removed, ...

Can an already indexed field be hid globally since...

How to remove the Google Maps Add-on from my Splun...