Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
16 results
Sort by:
11-23-2011
12:48 AM
...onitor input stanza.
Without crcSalt Indexer is not reading this file.
We have set retirement and archiving policy as 3 months for all splunk data. So after 3 months will splunk automatically read t...
- Tags:
- archiving
- retirement
05-19-2020
04:48 PM
...oldtofrozendir = $SPLUNK_DB/defaultdb/frozendb frozentimeperiodinsecs = 1209600
According to the "Set a retirement and archiving policy" and "indexes.conf" documentation on splunk docs, the settings i...
12-06-2019
10:18 AM
My instance of Splunk currently has 9.4 TB of disk for indexing. We have 360GB per day being indexed and I can't increase the disk size to support this daily indexing.
I need to clean up indexed e...
- Tags:
- splunk-enterprise
03-23-2018
04:07 AM
Hi,
We have enabled Application for EUM Browser Monitoring but we are not able to see the data from the Controller UI. We have checked the code snippet for javascript agent that is defined and i...
Labels
- Labels:
-
Real User Monitoring
05-16-2018
11:26 AM
...ndex?
or only in "indexes.conf" that is located in $SPLUNK_HOME/etc/system/local
I need to assure the logs one year in splunk.
regards.
- Tags:
- splunk-enterprise
10-16-2013
11:25 PM
5 Karma
I wanted to know if I am getting the data from some stream say TCP stream, where is the data stored? As I understand the data gets uploaded and indexed but some day can I get that data from Splunk? o...
09-26-2018
04:29 AM
...o convert the days to minutes value and then use that in abucket configuration. But I didn't find any proper example in Splunk.
Can anyone help me on this or any good documentation with a proper e...
11-13-2019
12:23 PM
Where and how can I set the data retention on Splunk?
Because I have seen there are many bow to set it like telemetry, main etc..
So it's really not clear...
03-09-2015
03:44 AM
...ommand line :
./splunk clean eventdata -f
and I have tried to erase all my log from the splunk folder, but I have still the same problem.
Please can someone help me?
