Alerting

How To Delete Alert logs

ad14
New Member

I set an Alerts that do search and save the result in a text file,
that Alerts create logs an fill up my storage
how can I set the Alert to not saving logs or delete the logs?

I am using Splunk 6.1 and My Alerts set up to every 5 min

Tags (3)
0 Karma

woodcock
Esteemed Legend

You can control the amount of time Splunk saves searches via various ttl settings and yours are probably too long-lived. See here:
http://answers.splunk.com/answers/4881/scheduled-saved-search-retention.html

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...