https://community.splunk.com/t5/Getting-Data-In/Removing-files-in-a-monitored-directory/m-p/186386#M37348 <P>hi,<BR /> I have a monitored directory that is indexed by splunk. I tried removing the files in the directory after they are indexed. Restarted the splunk daemon and I still see the file contents when searched. My question is, can I confirm that I can safely remove those files in that directory that are already indexed without any other consequences ?<BR /> thanks</P> Tue, 12 May 2015 13:35:33 GMT michael_lee 2015-05-12T13:35:33Z https://community.splunk.com/t5/Getting-Data-In/Removing-files-in-a-monitored-directory/m-p/186386#M37348 <P>hi,<BR /> I have a monitored directory that is indexed by splunk. I tried removing the files in the directory after they are indexed. Restarted the splunk daemon and I still see the file contents when searched. My question is, can I confirm that I can safely remove those files in that directory that are already indexed without any other consequences ?<BR /> thanks</P> Tue, 12 May 2015 13:35:33 GMT https://community.splunk.com/t5/Getting-Data-In/Removing-files-in-a-monitored-directory/m-p/186386#M37348 michael_lee 2015-05-12T13:35:33Z https://community.splunk.com/t5/Getting-Data-In/Removing-files-in-a-monitored-directory/m-p/186387#M37349 <P>Once files are indexed then data remains in Splunk until it ages out. You no longer need the source file.</P> Tue, 12 May 2015 13:58:12 GMT https://community.splunk.com/t5/Getting-Data-In/Removing-files-in-a-monitored-directory/m-p/186387#M37349 richgalloway 2015-05-12T13:58:12Z