Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
23 results
Sorted by:
05-19-2020
04:48 PM
...oldtofrozendir = $SPLUNK_DB/defaultdb/frozendb frozentimeperiodinsecs = 1209600
According to the "Set a retirement and archiving policy" and "indexes.conf" documentation on splunk docs, the settings i...
Labels
- Labels:
-
other
10-19-2017
12:48 AM
Hi,
I'm trying to delete old data due to space issue and I found this http://docs.splunk.com/Documentation/Splunk/6.2.1/Indexer/Setaretirementandarchivingpolicy.
But then I found that I have 4...
09-26-2018
04:29 AM
...o convert the days to minutes value and then use that in abucket configuration. But I didn't find any proper example in Splunk.
Can anyone help me on this or any good documentation with a proper e...
10-16-2013
11:25 PM
5 Karma
I wanted to know if I am getting the data from some stream say TCP stream, where is the data stored? As I understand the data gets uploaded and indexed but some day can I get that data from Splunk? o...
11-13-2019
12:23 PM
Where and how can I set the data retention on Splunk?
Because I have seen there are many bow to set it like telemetry, main etc..
So it's really not clear...
11-05-2014
10:22 AM
1 Karma
Hi,
When the maxVolumeDataSizeMB for the primary volume is exceeded, will the events automatically roll over to the secondary volume?
Here are my settings:
[volume:primary]
path = /a...
03-09-2015
03:44 AM
...ommand line :
./splunk clean eventdata -f
and I have tried to erase all my log from the splunk folder, but I have still the same problem.
Please can someone help me?
10-23-2018
01:30 PM
...uess I assumed a nightly job checked for old data and dumped it.
08-04-2010
04:50 PM
1 Karma
I am currently running a search for license bandwidth :
index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalGB = (kb/1024)/1024 | timechart span=1d sum(totalGB)
I...
10-19-2017
06:34 PM
...rozenTimePeriodInSecs under all square brackets to set my retirement policy there should be a result why there are so many square brackets there?
