Interested to Buy Any Domain ? << Click Here >> for more details...
How to exclude some events from being indexed by splunk?
- 1 Answers
- 357 Views
- I also Faced
- E-Mail Answers
Answer / Zenia Malhotra
To exclude some events from being indexed by Splunk, you can use the drop_rm event command in a custom input configuration file or an input search. This command tells Splunk not to index specific events that match certain criteria. For example, you could drop events containing sensitive information or duplicate data.
| Is This Answer Correct ? | 0 Yes | 0 No |
Explain splunk components?
What is the main difference between source & source type?
Give me the syntax of Case command?
Discuss about the sequence in which splunk upgrade can be done in a clustered environment?
What is the difference between splunk app and add-on?
Explain the output lookup command?
Explain pivot and data models?
Which is latest splunk version in use?
What is slp?
What is the use of stats command?
What do you mean by source type in splunk?
Explain Trouble shooting Splunk errors in splunk?
JavaScript Frameworks 
