Splunk Search

indexのrententionの仕様について。,indexのRetention (days)の仕様について。

suzuki_caica
New Member

DBConectデータを取り込んだところ、
indexのrententionは一日(a day ago)にもかかわらず、
5日分保持されております。
splunk cloudではrentention以上の期間を保持するものでしょうか。
もし保持する場合は別に一日分のみ保持する方法はありますでしょうか。

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...