Googled to try and find a solution to this problem and came across this answer. Also found this Splunk docs article: https://docs.splunk.com/Documentation/SOARonprem/5.5.0/Admin/DataRetention   Would the above accomplish not wanting containers and their data past X years? Would be really great if this was the case. ... View more