https://community.splunk.com/t5/Monitoring-Splunk/rotate-input-data/m-p/101676#M1227 <P>Retention periods are set on a per index basis in indexes.conf.</P> <P>See <A href="http://www.splunk.com/base/Documentation/latest/Admin/Setaretirementandarchivingpolicy" rel="nofollow">http://www.splunk.com/base/Documentation/latest/Admin/Setaretirementandarchivingpolicy</A> for a discussion of all the possible settings.</P> Thu, 09 Dec 2010 05:09:42 GMT ftk 2010-12-09T05:09:42Z https://community.splunk.com/t5/Monitoring-Splunk/rotate-input-data/m-p/101675#M1226 <P>Hello,</P> <P>It looks like I'm running out of space on my splunk server. Here is the error that I received when running a search.</P> <P>The minimum free disk space (2000MB) reached for /opt/splunk/var/run/splunk/dispatch. The search was not run.</P> <P>What config file options do I need to change so that older data is cleared out so that this doesn't continue to happen?</P> <P>I am running 4.1.6 on Debian 5.</P> <P>Thanks,</P> <P>Steven</P> Thu, 09 Dec 2010 04:30:45 GMT https://community.splunk.com/t5/Monitoring-Splunk/rotate-input-data/m-p/101675#M1226 spowell 2010-12-09T04:30:45Z https://community.splunk.com/t5/Monitoring-Splunk/rotate-input-data/m-p/101676#M1227 <P>Retention periods are set on a per index basis in indexes.conf.</P> <P>See <A href="http://www.splunk.com/base/Documentation/latest/Admin/Setaretirementandarchivingpolicy" rel="nofollow">http://www.splunk.com/base/Documentation/latest/Admin/Setaretirementandarchivingpolicy</A> for a discussion of all the possible settings.</P> Thu, 09 Dec 2010 05:09:42 GMT https://community.splunk.com/t5/Monitoring-Splunk/rotate-input-data/m-p/101676#M1227 ftk 2010-12-09T05:09:42Z