Hi all
How/where do I set inside splunk so that the logging data(ie syslog data) can be overwrite in X number of months?
Anyone can advise? Thank in advance.
Or automatically delete away logging data in past X number of months also can.
Please help. Thanks.