Splunk Search

indexのrententionの仕様について。,indexのRetention (days)の仕様について。

suzuki_caica
New Member

DBConectデータを取り込んだところ、
indexのrententionは一日(a day ago)にもかかわらず、
5日分保持されております。
splunk cloudではrentention以上の期間を保持するものでしょうか。
もし保持する場合は別に一日分のみ保持する方法はありますでしょうか。

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...