We have a considerable amount of searches on the jobs page that have an expires time of "Saved". Many of these are from a few months ago, and appear to be searches done by end users, and they may have saved the search, or shared a link to the results with someone.
Is there a way to auto-expire these after a certain amount of time?
Thanks,
--adam
You could script the clean dispatch command: http://answers.splunk.com/answers/139924/where-can-i-find-documentation-for-splunkd-clean-dispatch-c...
You could script the clean dispatch command: http://answers.splunk.com/answers/139924/where-can-i-find-documentation-for-splunkd-clean-dispatch-c...