Getting Data In

How do i delete host

vaibhavbeohar
Path Finder

How do i delete host, sourcetype and source from splunk..
have tried following option,i am able to remove index but i want to delete host, sourcetype and source from the home page(dashboard)

*host="Vaibhav-PC" | delete
sourcetype="IIS" | delete
source="C:\Users\Administrator\Desktop\W3SVC2.zip:.\u_ex120227.log" | delete
*

after removing have restarted splunk,but no sucess

Thanks,

Tags (1)
0 Karma

MuS
Legend

Hi vaibhavbeohar

| delete

does not delete data, it marks it as unsearchable so it will not appear again in any search. If you want to delete indexed data you can read the docs and proceed like described.

cheers

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...