Hi all
I deleted a large number of events taken through a UniversalForwarder (v5.0.3) using the | delete command.
However these events are still showing up in the event counts on the Search summary page, they don't show up in a regular search only on the summary page.
Is there any way to fix these count totals?
Set up is clustered environment with 2 indexers, one cluster master and one search head, all servers are v5.0.3 running on Windows 2008.