How To Delete Alert logs

ad14 · ‎05-25-2015

I set an Alerts that do search and save the result in a text file,
that Alerts create logs an fill up my storage
how can I set the Alert to not saving logs or delete the logs?

I am using Splunk 6.1 and My Alerts set up to every 5 min

woodcock · ‎05-25-2015

You can control the amount of time Splunk saves searches via various ttl settings and yours are probably too long-lived. See here:
http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html

How To Delete Alert logs

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

What's New in Splunk Enterprise Security 8.8 and Beyond

A Four-Part Event Series: State of Observability - Where AI Meets Performance

Join the Conversation

How To Delete Alert logs

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

What's New in Splunk Enterprise Security 8.8 and Beyond

A Four-Part Event Series: State of Observability - Where AI Meets Performance