<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Can I continue to delete files on Splunk Free Edition in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66880#M13428</link>
    <description>&lt;P&gt;Hi, I'm currently using Splunk Enterprise Trial Edition, and I got to know that Splunk Free does not have Access control feature for it. I wonder Splunk Free would allow me to delete the log files after indexing just as like Admin with can_delete privilege? &lt;/P&gt;</description>
    <pubDate>Thu, 24 Mar 2011 12:09:04 GMT</pubDate>
    <dc:creator>kenknee</dc:creator>
    <dc:date>2011-03-24T12:09:04Z</dc:date>
    <item>
      <title>Can I continue to delete files on Splunk Free Edition</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66880#M13428</link>
      <description>&lt;P&gt;Hi, I'm currently using Splunk Enterprise Trial Edition, and I got to know that Splunk Free does not have Access control feature for it. I wonder Splunk Free would allow me to delete the log files after indexing just as like Admin with can_delete privilege? &lt;/P&gt;</description>
      <pubDate>Thu, 24 Mar 2011 12:09:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66880#M13428</guid>
      <dc:creator>kenknee</dc:creator>
      <dc:date>2011-03-24T12:09:04Z</dc:date>
    </item>
    <item>
      <title>Re: Can I continue to delete files on Splunk Free Edition</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66881#M13429</link>
      <description>&lt;P&gt;This feature is available to the Admin user in the free edition as well.&lt;/P&gt;

&lt;P&gt;You should note though that the &lt;CODE&gt;delete&lt;/CODE&gt; operator doesn't actually delete the log files themselves, rather it marks events in Splunk's index as deleted. Also as it only marks them as deleted rather than deleting them for real, you won't immediately recover any disk space by running &lt;CODE&gt;delete&lt;/CODE&gt;. Events that are marked as deleted will however be totally removed when events are moved to cold index (think of it as archiving).&lt;/P&gt;</description>
      <pubDate>Thu, 24 Mar 2011 13:27:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66881#M13429</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2011-03-24T13:27:28Z</dc:date>
    </item>
    <item>
      <title>Re: Can I continue to delete files on Splunk Free Edition</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66882#M13430</link>
      <description>&lt;P&gt;Is this true with the latest version?  6.2?  I'm not able to pipe a search into the delete.  It says it's deleted but if I refresh the search the data is still there.  I can't check the user roles in the free version to see if I have delete access?&lt;/P&gt;</description>
      <pubDate>Thu, 23 Apr 2015 21:53:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Can-I-continue-to-delete-files-on-Splunk-Free-Edition/m-p/66882#M13430</guid>
      <dc:creator>cpt12tech</dc:creator>
      <dc:date>2015-04-23T21:53:46Z</dc:date>
    </item>
  </channel>
</rss>

