SPL

Clean or Delete Data in a given Source

Description

The following Splunk query will wipe or clear a data source. Ensure you specify an index else it will wipe the given source for all indexes.

2 3

source=path	o\sourcename | delete

1 total

john117

7/9/2018

It should be noted that this will not actually wipe the data, but simply hide it from view.

You must log in to post a comment.