×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
sunnykhatik1019
New Member
Member since: ‎07-15-2025
‎07-24-2025
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎07-15-2025
Activity Feed
Topics I've Started
View All

Re: Splunk Trustar

by in Splunk Dev
‎07-24-2025 05:18 AM
‎07-24-2025 05:18 AM
Hi @livehybrid , Yes, you've hit on my exact point. I'm trying to determine the best way to contact support – specifically, if their assistance is limited to paying customers or if there's an avenue for the general public to inquire. This is precisely why I brought my question to the Splunk forum. If you have any information on how to reach the Splunk or TruSTAR technical teams, I would greatly appreciate your guidance. ... View more

Splunk Trustar

by in Splunk Dev
‎07-15-2025 04:31 AM
‎07-15-2025 04:31 AM
Subject: Trustar API : Data Retention Policy Inquiry Dear Splunk Community, We are currently utilizing your search_indicators API, as documented here: https://docs.trustar.co/api/v13/indicators/search_indicators.html. While we understand that the API supports a maximum time range of 1 year per query, we require clarification on the overall data retention policy for indicators. I just want to know the total historical period for which indicator data is stored and retrievable via this API, regardless of the single query window limit? Your insight into this would be greatly appreciated for our data strategy. TruSTAR  ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-24-2025 05:09 AM