Hi at all,
I installed Splunk App for BlueCoat.
I loades some test data and now I have to delete them before loading the production data.
Logs are loaded in the "bcoat_logs" index and I haven't problems to delete them.
Instead, the problem is that App loaded logs also in a tsidx index and I don't know how to delete them.
Anyone can help me?
Thank you.
Giuseppe
↧