how to know and delete old indexed log files in hard disk?

[shariinPH]

Hi all
I want to know what are the old indexed log file and at the same time delete those log files on my hard disk
Pls help me with this.

Thanks

[MuS]

Hi shariinPH,

If you haven't set any coldToFrozenScript in your indexes.conf your old events will not be archived http://docs.splunk.com/Documentation/Splunk/6.2.3/Indexer/Automatearchiving

That said, if you're using all default settings for your indexes, Splunk will delete any old events for you.
Check the docs for more details on that http://docs.splunk.com/Documentation/Splunk/6.2.3/Indexer/Setaretirementandarchivingpolicy

Hope that helps ...

cheers, MuS

[shariinPH]

Thanks @MuS !!:)

[MuS]

If this answers your question, please accept it - thx 🙂