Knowledge Management

Summary view of data - after an year

Contributor

How can i store some data permanently in Hot bucket for my summary view analysis ?

Points :
-after 6 months or an year - I need to view some data from the logs
-Need only some important data from an event - rest can be archived.
-Also my performance should not be affected

Tags (1)
0 Karma

SplunkTrust
SplunkTrust

Sounds like a task for summary indexing.

0 Karma