Getting Data In

How to set the data retention in Splunk?

dani9
Explorer

Where and how can I set the data retention on Splunk?

Because I have seen there are many bow to set it like telemetry, main etc..
So it's really not clear...

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Here's a doc topic for you: Set a retirement and archiving policy in the Managing Indexers and Clusters of Indexers manual. Also see Archive indexed data.

Get Updates on the Splunk Community!

Digital Resilience Assessment Launch | How prepared are you for disruption?

Disruption is inevitable. The question is – how prepared are you to handle it? In today’s fast-moving digital ...

Buttercup Games: Further Dashboarding Techniques (Part 2)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Index This | What is the next number in the series? 7,645 5,764 4,576…

February 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...