how can I delete or archive old data

[perlish]

There're 300G disk space in my server, how can I delete or archive old data in splunk ?
Thank you !

[DaveSavage · Accepted solution]

Check this out...and there is a rich thread on this subject in splunkbase. Just be careful especially around the time parameters!

http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk