https://community.splunk.com/t5/Deployment-Architecture/When-does-Splunk-dump-data/m-p/441152#M24754 <P>All, </P> <P>When does Splunk look at the time on a piece of data and determine the data is aged beyond the index retention and dump said data? Is this a nightly job, real time? How can I view this process and kick it off manually if needed?</P> Thu, 07 Jun 2018 21:50:33 GMT daniel333 2018-06-07T21:50:33Z https://community.splunk.com/t5/Deployment-Architecture/When-does-Splunk-dump-data/m-p/441152#M24754 <P>All, </P> <P>When does Splunk look at the time on a piece of data and determine the data is aged beyond the index retention and dump said data? Is this a nightly job, real time? How can I view this process and kick it off manually if needed?</P> Thu, 07 Jun 2018 21:50:33 GMT https://community.splunk.com/t5/Deployment-Architecture/When-does-Splunk-dump-data/m-p/441152#M24754 daniel333 2018-06-07T21:50:33Z