In the ITSI health check dashboard, it found almost 700 duplicate entities, and I couldn't find any references on how best to handle this.
Is there an efficient way to delete all the extra copies?
Hi Tyler, please see the bulk delete instructions here: https://docs.splunk.com/Documentation/ITSI/latest/Configure/Deleteentities
I've looked at that and it only shows how to delete duplicates from SAI, which is not an issue in my instance, or how to disable recurring entity import searches, not how to delete the duplicate entities that have already come in