Hi, I would like to increase the cold retention period for index [pa] to 180 days, but when i get into indexes.conf i only see below configuration there is no frozenTimePeriodInSecs = for index pa # Index for Palo Alto Networks # This index is required by Splunk_TA_paloalto [pa] repFactor = auto homePath = volume:hot/pa/db homePath.maxDataSizeMB = 512000 coldPath = volume:cold/pa/colddb coldPath.maxDataSizeMB = 512000 thawedPath = $SPLUNK_DB_THAWED/pa/thaweddb coldToFrozenDir = $SPLUNK_DB_FROZEN/pa/frozendb where can i find the time setting for this index?
... View more