Quantcast
Viewing all articles
Browse latest Browse all 47296

Splunk retention not happening

Hi , I am testing the retention related settings in my test index. I have set up the frozenTimePeriodInSecs = 259200. 259200 is for 3 days. And it cleaned up all the 3 days old data after restart. But after that everyday it is not cleaning up the 3 days old data. Please let me know what could be the reason for this.

Viewing all articles
Browse latest Browse all 47296

Trending Articles