Hello to all
I would like to know the default time set for hot, warm, cold and frozen buckets. I also want to know what the retention policy is.
When I go to "Settings" -> "Monitoring Console" -> "Indexing" -> "Indexes and Volumes" -> "Index Detail: Instance"
I find the following retention policy
When I enter the path $SPLUNK_HOME/etc/system/local/default/web.conf I can see some information about the buckets
thanks if someone can solve my question
