Solved: how can I delete or archive old data - Splunk Community

Getting Data In

There're 300G disk space in my server, how can I delete or archive old data in splunk ?
Thank you !

1 Solution

Solution

Check this out...and there is a rich thread on this subject in splunkbase. Just be careful especially around the time parameters!

http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk

View solution in original post

Solution

Check this out...and there is a rich thread on this subject in splunkbase. Just be careful especially around the time parameters!

http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...