Hi,
Is there any configuration in Splunk forwarder to delete old splunkd logs, metric logs etc.
This should probably help - Rotating/clearing out the Universal Forwarder's log files
Hi Rayudu,
You can delete old splunkd logs i.e., internal logs by tweaking _internal index configuration under indexes.conf.