We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent af1f748 commit 44d5b0cCopy full SHA for 44d5b0c
Duplicates/delete-duplicates.spl
@@ -31,7 +31,9 @@ index=test1 sourcetype=test_objects2
31
| eval eid=_cd
32
33
34
--- splunk search to delete duplicates
+-- Splunk search to delete duplicates. The subsearch finds the duplicates and returns the event ID
35
+-- to the main/primary/outer search as 'eid' where it joins to that search as a filter on 'eid'.
36
+-- The primary search performs the delete.
37
index=test1 sourcetype=test_objects2
38
39
| search
0 commit comments