Dear All,
Splunk shows acl_tag in search and it was in Interesting Fields. As I'm new to Splunk, I want to know about this kind of stuff. Is there is any link or document to read about this?
Thank you,
Vettai
maybe, on your search you can add a | fields -acl_tag
("fields", then a minus sign)to remove that acl_tag field from your results.
http://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/fields
Can you update us your search query please.
Best Regards,
Sekar