Deployment Architecture

Retention of SPLUNK data

sushma7
Path Finder

Hi Team,

Can you let me know what is the retention period for the data stored in the splunk.

How long the indexed data will remain in the SPLUNK?

Thanks & Regards,
Sushma.

Tags (1)
0 Karma
1 Solution

somesoni2
Revered Legend

Its a configurable value. There are many questions in splunkbase on similar lines (see the 'related questions' on right of this page). Documentation link: http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Setaretirementandarchivingpolicy

View solution in original post

somesoni2
Revered Legend

Its a configurable value. There are many questions in splunkbase on similar lines (see the 'related questions' on right of this page). Documentation link: http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Setaretirementandarchivingpolicy

Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...