Deployment Architecture

Retention of SPLUNK data

sushma7
Path Finder

Hi Team,

Can you let me know what is the retention period for the data stored in the splunk.

How long the indexed data will remain in the SPLUNK?

Thanks & Regards,
Sushma.

Tags (1)
0 Karma
1 Solution

somesoni2
Revered Legend

Its a configurable value. There are many questions in splunkbase on similar lines (see the 'related questions' on right of this page). Documentation link: http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Setaretirementandarchivingpolicy

View solution in original post

somesoni2
Revered Legend

Its a configurable value. There are many questions in splunkbase on similar lines (see the 'related questions' on right of this page). Documentation link: http://docs.splunk.com/Documentation/Splunk/6.1.1/Indexer/Setaretirementandarchivingpolicy

Get Updates on the Splunk Community!

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...