Delete data for a created policy

Sometimes it’s required to delete specified data for a certain time period. There is a special command for this:

staffcop delete-filter [--from=YYYY-MM-DD] [--to=YYYY-MM-DD] FILTER_NAME

The command deletes all data by the filter name for the specified time period (if any).

Note

The command deletes only events, related files are not deleted.

Working sample

  1. Create a filter with some data to be deleted.

../_images/delete_data_1.png

  1. Delete all data from 9th December till 13th February.

../_images/delete_data_2.png

123 events were removed.