<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How To Delete Alert logs in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/How-To-Delete-Alert-logs/m-p/121999#M1850</link>
    <description>&lt;P&gt;You can control the amount of time Splunk saves searches via various &lt;CODE&gt;ttl&lt;/CODE&gt; settings and yours are probably too long-lived.  See here:&lt;BR /&gt;
&lt;A href="http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html"&gt;http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 25 May 2015 14:10:36 GMT</pubDate>
    <dc:creator>woodcock</dc:creator>
    <dc:date>2015-05-25T14:10:36Z</dc:date>
    <item>
      <title>How To Delete Alert logs</title>
      <link>https://community.splunk.com/t5/Alerting/How-To-Delete-Alert-logs/m-p/121998#M1849</link>
      <description>&lt;P&gt;I set an Alerts that do search and save the result in a text file,&lt;BR /&gt;
that Alerts create logs an fill up my storage&lt;BR /&gt;
how can I set the Alert to not saving logs or delete the logs?&lt;/P&gt;

&lt;P&gt;I am using Splunk 6.1 and  My Alerts set up to every 5 min&lt;/P&gt;</description>
      <pubDate>Mon, 25 May 2015 11:22:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-To-Delete-Alert-logs/m-p/121998#M1849</guid>
      <dc:creator>ad14</dc:creator>
      <dc:date>2015-05-25T11:22:29Z</dc:date>
    </item>
    <item>
      <title>Re: How To Delete Alert logs</title>
      <link>https://community.splunk.com/t5/Alerting/How-To-Delete-Alert-logs/m-p/121999#M1850</link>
      <description>&lt;P&gt;You can control the amount of time Splunk saves searches via various &lt;CODE&gt;ttl&lt;/CODE&gt; settings and yours are probably too long-lived.  See here:&lt;BR /&gt;
&lt;A href="http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html"&gt;http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 25 May 2015 14:10:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/How-To-Delete-Alert-logs/m-p/121999#M1850</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-05-25T14:10:36Z</dc:date>
    </item>
  </channel>
</rss>

