Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Index Retention Time

$
0
0
Hello, I did some reading up on the hot, warm and cold buckets and data retention of indexes but I am not sure I 100% get it. What I am simply trying to do is to set my indexes to keep data for 180 days and then whatever data is older should be deleted. There seems to be this frozen data timer but I am not able to find any settings based on time. every setting I see seemed to be based on how much storage the index\bucket uses. What am I missing here? Thank you Marcus

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>