I destroyed some VMs in my production recently. But I can still them in the page: "IT Essentials Work" => "Infrastructure Overview" => Unix/Linux Add-on. They have inactive status already but how do I completely remove them from the Splunk Cloud? I don't want to monitor them anymore. ... View more

I have HEC to send an event to Splunk in JSON format:     { Status: Down Source: GCP URL: url_1 } { Status: Up Source: GCP URL: url_2 } { Status: Down Source: AWS URL: url_1 } { Status: Up Source: AWS URL: url_2 }     I want to extract value from JSON then declare a variable, not sure should I use eval or stats For example: declare a variable usl_1_aws_status, it should be Down declare a variable usl_2_gcp_status, it should be UP How to do I extract value from JSON then declare a variable? ... View more