https://community.splunk.com/t5/Getting-Data-In/Splunk-DBConnect-and-retention/m-p/486525#M83307 <P>Hi Nithin,</P> <P>Data retention period on Splunk doesn't depends on how old your data in data sources. All it cares about how old is data once it got indexed.</P> <P>So, in your case you should be able to search your 1.5 years old db data after it's indexed.</P> Mon, 18 Nov 2019 17:15:22 GMT sanjeev543 2019-11-18T17:15:22Z https://community.splunk.com/t5/Getting-Data-In/Splunk-DBConnect-and-retention/m-p/486524#M83306 <P>Hi All, </P> <P>I am wondering how does the retention works when I am ingesting data which is older than the actual retention period. </P> <P>For example, I have an index with a rention period of 1yr. I now have a requirement to ingest the data from the database which is older than 1.5yr to Splunk. What happens to the data when I onboard? Will it stay for another 1.5yr or will that become unsearchable soon after ingestion to Splunk. </P> <P>Thanks in Advance. </P> Mon, 18 Nov 2019 17:05:49 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-DBConnect-and-retention/m-p/486524#M83306 nithin204 2019-11-18T17:05:49Z https://community.splunk.com/t5/Getting-Data-In/Splunk-DBConnect-and-retention/m-p/486525#M83307 <P>Hi Nithin,</P> <P>Data retention period on Splunk doesn't depends on how old your data in data sources. All it cares about how old is data once it got indexed.</P> <P>So, in your case you should be able to search your 1.5 years old db data after it's indexed.</P> Mon, 18 Nov 2019 17:15:22 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-DBConnect-and-retention/m-p/486525#M83307 sanjeev543 2019-11-18T17:15:22Z