Modify Raw Events to Remove Fields and Reduce Storage
This video shows you how to remove unwanted fields from a raw event and reconstruct it with a reduced number of fields to optimize storage in the Splunk platform.
Related Videos
Splunk ARI Feature Video: Enterprise Security Integrations with ARI
The best of both worlds with the Splunk Cloud Platform
Splunk AI Assistant Demo: Write & Understand SPL Using Natural Language