Deleting old Splunkd logs in Splunk forwarder

[RAYUDU_NARA]

Hi,

Is there any configuration in Splunk forwarder to delete old splunkd logs, metric logs etc.

[ddrillic]

This should probably help - Rotating/clearing out the Universal Forwarder's log files

[sbbadri]

Hi Rayudu,

You can delete old splunkd logs i.e., internal logs by tweaking _internal index configuration under indexes.conf.