Splunk SOAR

Is there a way to whitelist a specific container to prevent it from being deleted?

dennyw
Engager

hey guys, with data retention being set, is there a way to whitelist a specific container to prevent it from being deleted?

Labels (2)
0 Karma

marnall
Motivator

Unfortunately not. The configure_db_maintenance settings do not have that level of granularity. It applies to all containers.

0 Karma
Get Updates on the Splunk Community!

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...