https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69023#M13972 <P>Or automatically delete away logging data in past X number of months also can. </P> <P>Please help. Thanks.</P> Thu, 21 Mar 2013 04:03:58 GMT Bsa_syslog 2013-03-21T04:03:58Z https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69022#M13971 <P>Hi all</P> <P>How/where do I set inside splunk so that the logging data(ie syslog data) can be overwrite in X number of months?</P> <P>Anyone can advise? Thank in advance.</P> Thu, 21 Mar 2013 04:01:22 GMT https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69022#M13971 Bsa_syslog 2013-03-21T04:01:22Z https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69023#M13972 <P>Or automatically delete away logging data in past X number of months also can. </P> <P>Please help. Thanks.</P> Thu, 21 Mar 2013 04:03:58 GMT https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69023#M13972 Bsa_syslog 2013-03-21T04:03:58Z https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69024#M13973 <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/Indexer/Setaretirementandarchivingpolicy">http://docs.splunk.com/Documentation/Splunk/5.0.2/Indexer/Setaretirementandarchivingpolicy</A></P> Thu, 21 Mar 2013 07:43:55 GMT https://community.splunk.com/t5/Getting-Data-In/overwite-of-logging-data/m-p/69024#M13973 Ayn 2013-03-21T07:43:55Z