https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613952#M213346 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/249683">@PTIch</a>,</P><P>if you're speaking of windows eventlogs, you have to configure your Windows EvenLog to have a minor retention (e.g. 24/48 hours).</P><P>If you're speaking of logs in files, you have to create a shell script that deletes files older than 24/48 hours.</P><P>This isn't a Splunk question.</P><P>ciao.</P><P>Giuseppe</P> Wed, 21 Sep 2022 14:56:42 GMT gcusello 2022-09-21T14:56:42Z https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613948#M213344 <P><SPAN>Hi All,</SPAN></P> <P><SPAN>I have a large number of Windows logs in directory. How can I automatically&nbsp;delete them from the disk space after Splunk saves them and the folder size will be bigger than 5 gigabytes? W<SPAN class="">here can I write such configuration?</SPAN></SPAN></P> <P>Thanks in advance!</P> Wed, 21 Sep 2022 14:53:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613948#M213344 PTIch 2022-09-21T14:53:56Z https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613952#M213346 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/249683">@PTIch</a>,</P><P>if you're speaking of windows eventlogs, you have to configure your Windows EvenLog to have a minor retention (e.g. 24/48 hours).</P><P>If you're speaking of logs in files, you have to create a shell script that deletes files older than 24/48 hours.</P><P>This isn't a Splunk question.</P><P>ciao.</P><P>Giuseppe</P> Wed, 21 Sep 2022 14:56:42 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613952#M213346 gcusello 2022-09-21T14:56:42Z https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613957#M213348 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/249683">@PTIch</a>&nbsp;,</P><P>good for you, see next time!</P><P>Ciao and happy splunking</P><P>Giuseppe</P><P>P.S.: Karma Points are appreciated <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Wed, 21 Sep 2022 15:32:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-Windows-logs-after-it-was-read-by-Splunk/m-p/613957#M213348 gcusello 2022-09-21T15:32:56Z