https://community.splunk.com/t5/Getting-Data-In/Purge-data-only-keep-last-7-days/m-p/97743#M20378 <P>You'll want to review this doc: <CODE><A href="http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy" target="test_blank">http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy</A></CODE>. You can set retention on a per-index basis, and set the cold to Frozen at 7 days.</P> Mon, 14 Oct 2013 19:39:21 GMT alacercogitatus 2013-10-14T19:39:21Z https://community.splunk.com/t5/Getting-Data-In/Purge-data-only-keep-last-7-days/m-p/97742#M20377 <P>How do I setup splunk to purge anything older than 7 days?</P> Mon, 14 Oct 2013 19:28:26 GMT https://community.splunk.com/t5/Getting-Data-In/Purge-data-only-keep-last-7-days/m-p/97742#M20377 tb5821 2013-10-14T19:28:26Z https://community.splunk.com/t5/Getting-Data-In/Purge-data-only-keep-last-7-days/m-p/97743#M20378 <P>You'll want to review this doc: <CODE><A href="http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy" target="test_blank">http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Setaretirementandarchivingpolicy</A></CODE>. You can set retention on a per-index basis, and set the cold to Frozen at 7 days.</P> Mon, 14 Oct 2013 19:39:21 GMT https://community.splunk.com/t5/Getting-Data-In/Purge-data-only-keep-last-7-days/m-p/97743#M20378 alacercogitatus 2013-10-14T19:39:21Z