topic Re: How can I purge data older than say 30 days from some but not all of my indexes to free up disk space? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158250#M32068 <P>You can adjust the retention of your index and it will start freezing old buckets or you can use the delete command to be more selective:</P> <PRE><CODE><A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Delete" target="test_blank">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Delete</A> </CODE></PRE> Tue, 16 Jun 2015 15:38:02 GMT dflodstrom 2015-06-16T15:38:02Z How can I purge data older than say 30 days from some but not all of my indexes to free up disk space? https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158249#M32067 <P>I have run out of disk space on my indexers. I need to reclaim space and want to purge data from some of the indexes but save the data in others. How would I do that?</P> Tue, 16 Jun 2015 15:18:39 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158249#M32067 bgamblin 2015-06-16T15:18:39Z Re: How can I purge data older than say 30 days from some but not all of my indexes to free up disk space? https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158250#M32068 <P>You can adjust the retention of your index and it will start freezing old buckets or you can use the delete command to be more selective:</P> <PRE><CODE><A href="http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Delete" target="test_blank">http://docs.splunk.com/Documentation/Splunk/6.2.3/SearchReference/Delete</A> </CODE></PRE> Tue, 16 Jun 2015 15:38:02 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158250#M32068 dflodstrom 2015-06-16T15:38:02Z Re: How can I purge data older than say 30 days from some but not all of my indexes to free up disk space? https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158251#M32069 <P>You can edit the indexes.conf on the indexers, and specify a time retention on a per index basis. (frozenTimePeriodInSecs)</P> Tue, 16 Jun 2015 16:06:15 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158251#M32069 yannK 2015-06-16T16:06:15Z Re: How can I purge data older than say 30 days from some but not all of my indexes to free up disk space? https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158252#M32070 <P>I would also consider using a combination of maxTotalDataSizeMB, homePath.maxDataSizeMB, and coldPath.maxDataSizeMB to control indice size.</P> Tue, 16 Jun 2015 20:10:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-purge-data-older-than-say-30-days-from-some-but-not/m-p/158252#M32070 bmacias84 2015-06-16T20:10:55Z