Hi,
I have Splunk running with several indexes configured.
I want to limit one index (index=dev) so it will not use more than 1GB of the total license (10GB) per day.
Can anyone help and explain how to achieve this?
Thanks,
Rotem
↧