<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Truncate index in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/606226#M105346</link>
    <description>&lt;P&gt;Link no longer works. Why does this keep moving around?&lt;/P&gt;</description>
    <pubDate>Tue, 19 Jul 2022 19:38:37 GMT</pubDate>
    <dc:creator>danks</dc:creator>
    <dc:date>2022-07-19T19:38:37Z</dc:date>
    <item>
      <title>Is it possible to truncate data in an index eg. delete all events that are older than 60 days, and if how?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/33375#M5986</link>
      <description>&lt;P&gt;Is it possible to truncate data in a index eg. delete all events that are older than 60 days, and if how ? &lt;BR /&gt;Can it be scheduled ?&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2022 19:58:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/33375#M5986</guid>
      <dc:creator>preben12</dc:creator>
      <dc:date>2022-07-19T19:58:08Z</dc:date>
    </item>
    <item>
      <title>Re: Truncate index</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/33376#M5987</link>
      <description>&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Indexer/Setaretirementandarchivingpolicy"&gt;http://docs.splunk.com/Documentation/Splunk/5.0.2/Indexer/Setaretirementandarchivingpolicy&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 14 May 2013 20:02:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/33376#M5987</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2013-05-14T20:02:57Z</dc:date>
    </item>
    <item>
      <title>Re: Truncate index</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/606226#M105346</link>
      <description>&lt;P&gt;Link no longer works. Why does this keep moving around?&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2022 19:38:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/606226#M105346</guid>
      <dc:creator>danks</dc:creator>
      <dc:date>2022-07-19T19:38:37Z</dc:date>
    </item>
    <item>
      <title>Re: Truncate index</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/606238#M105349</link>
      <description>&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/9.0.0/Indexer/Setaretirementandarchivingpolicy" target="_blank" rel="noopener"&gt;https://docs.splunk.com/Documentation/Splunk/9.0.0/Indexer/Setaretirementandarchivingpolicy&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;the URL contains the Splunk version number in it, right.. just update that to your required splunk version, .. you will get the doc you are looking for. thats it.. simple, right?!?!&lt;/P&gt;</description>
      <pubDate>Tue, 19 Jul 2022 21:01:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-truncate-data-in-an-index-eg-delete-all-events/m-p/606238#M105349</guid>
      <dc:creator>inventsekar</dc:creator>
      <dc:date>2022-07-19T21:01:02Z</dc:date>
    </item>
  </channel>
</rss>

