topic Re: How can I increase how far back users can see data in splunk? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-can-I-increase-how-far-back-users-can-see-data-in-splunk/m-p/186528#M37362 <P>I believe the data available in your index that you're search is only 90 days. This is set by the retention period policy that you/your Splunk admin has applied. See below link on how the data retention policy is applied on Splunk. Based on this, setup appropriate data retention policy</P> <P><A href="http://wiki.splunk.com/Deploy:BucketRotationAndRetention">http://wiki.splunk.com/Deploy:BucketRotationAndRetention</A><BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/Indexer/Setaretirementandarchivingpolicy">http://docs.splunk.com/Documentation/Splunk/6.2.5/Indexer/Setaretirementandarchivingpolicy</A></P> Wed, 26 Aug 2015 17:05:55 GMT somesoni2 2015-08-26T17:05:55Z How can I increase how far back users can see data in splunk? https://community.splunk.com/t5/Getting-Data-In/How-can-I-increase-how-far-back-users-can-see-data-in-splunk/m-p/186527#M37361 <P>When I run a search for "All Time" it looks to stop displaying data beyond 90 days into the past. Where's the config file(s) I need to change to increase how far back users can view indexed data?</P> Wed, 26 Aug 2015 16:43:11 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-increase-how-far-back-users-can-see-data-in-splunk/m-p/186527#M37361 jcrua0 2015-08-26T16:43:11Z Re: How can I increase how far back users can see data in splunk? https://community.splunk.com/t5/Getting-Data-In/How-can-I-increase-how-far-back-users-can-see-data-in-splunk/m-p/186528#M37362 <P>I believe the data available in your index that you're search is only 90 days. This is set by the retention period policy that you/your Splunk admin has applied. See below link on how the data retention policy is applied on Splunk. Based on this, setup appropriate data retention policy</P> <P><A href="http://wiki.splunk.com/Deploy:BucketRotationAndRetention">http://wiki.splunk.com/Deploy:BucketRotationAndRetention</A><BR /> <A href="http://docs.splunk.com/Documentation/Splunk/6.2.5/Indexer/Setaretirementandarchivingpolicy">http://docs.splunk.com/Documentation/Splunk/6.2.5/Indexer/Setaretirementandarchivingpolicy</A></P> Wed, 26 Aug 2015 17:05:55 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-increase-how-far-back-users-can-see-data-in-splunk/m-p/186528#M37362 somesoni2 2015-08-26T17:05:55Z