We have some messages saying -
Search peer has the following message: Received event for unconfigured/disabled/deleted index= with source="" host="" sourcetype="". So far received events from 6 missing index(es).
Since this index - `` doesn't exist, I wonder if I should delete these events at parse time based on the index name. Is it possible?
↧