topic Re: How long does Splunk Cloud store logs? in Splunk Dev https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264626#M3321 <P>You configure data retention for each of your indexes. See <A href="http://docs.splunk.com/Documentation/SplunkCloud/latest/User/DataPolicy">Data policies</A> in the <EM>Splunk Cloud User Manual</EM>.</P> Tue, 06 Oct 2015 19:12:19 GMT ChrisG 2015-10-06T19:12:19Z How long does Splunk Cloud store logs? https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264625#M3320 <P>I am using Splunk Cloud. Assuming the total storage limit is never reached, how long are my logs stored for?</P> Tue, 06 Oct 2015 19:05:47 GMT https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264625#M3320 will_paxata 2015-10-06T19:05:47Z Re: How long does Splunk Cloud store logs? https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264626#M3321 <P>You configure data retention for each of your indexes. See <A href="http://docs.splunk.com/Documentation/SplunkCloud/latest/User/DataPolicy">Data policies</A> in the <EM>Splunk Cloud User Manual</EM>.</P> Tue, 06 Oct 2015 19:12:19 GMT https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264626#M3321 ChrisG 2015-10-06T19:12:19Z Re: How long does Splunk Cloud store logs? https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264627#M3322 <P>Thanks for pointing that out.</P> <P>Do you know what the default max age of events? I know that the total max size is specified by the Splunk Cloud license, but I cannot find any information on the default max age.</P> Tue, 06 Oct 2015 21:30:08 GMT https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264627#M3322 will_paxata 2015-10-06T21:30:08Z Re: How long does Splunk Cloud store logs? https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264628#M3323 <P>Looking in the Splunk Enterprise <EM>Managing Indexers and Clusters of Indexers</EM> manual, the <A href="http://docs.splunk.com/Documentation/Splunk/6.3.0/Indexer/Setaretirementandarchivingpolicy">Set a retirement and archiving policy</A> topic says that the default value of <CODE>frozenTimePeriodInSecs</CODE> is 188697600 seconds, or approximately 6 years. </P> Tue, 06 Oct 2015 21:38:06 GMT https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264628#M3323 ChrisG 2015-10-06T21:38:06Z Re: How long does Splunk Cloud store logs? https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264629#M3324 <P>I'll assume that is the default for Splunk Cloud as well. Thank you, ChrisG!</P> Tue, 06 Oct 2015 21:44:36 GMT https://community.splunk.com/t5/Splunk-Dev/How-long-does-Splunk-Cloud-store-logs/m-p/264629#M3324 will_paxata 2015-10-06T21:44:36Z