There're 300G disk space in my server, how can I delete or archive old data in splunk ?
Thank you !
Check this out...and there is a rich thread on this subject in splunkbase. Just be careful especially around the time parameters!
http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk
Check this out...and there is a rich thread on this subject in splunkbase. Just be careful especially around the time parameters!
http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk