Refine your search:
In other words, can I set 30 days OR 700G (for instance)? The docs aren't clear on how to do that.
asked 31 Jul '10, 01:33
bfaber 226●3●5●16 accept rate: 26%
edited 31 Jul '10, 03:47
Yes. All the configurations are evaluated, and whenever one of them is satisfied, the appropriate data is aged out.
answered 31 Jul '10, 02:12
gkanapathy ♦ 32.4k●4●8●27 accept rate: 41%
Log In to enable email subscriptions
Answers
Answers + Comments
Markdown Basics
learn more about Markdown
Tags:
retention-policy ×29
Asked: 31 Jul '10, 01:33
Seen: 973 times
Last updated: 31 Jul '10, 03:47
Detect Abnormal traffic on weekend
How to suppress extra _time line on timechart in dashboard
Time stamping for events with only a single date per file.
Automatic search-time field extraction: Need equals sign??
Positioning of different elements like dropdowns, textboxes and time-range Picker ?
Splunk not breaking events on line break properly
my monitored file is always skipped because it has the same name, or an identical header.
Syntax question about adding custom regex fields into the XML of a dashboard
matching fixed width fields or fields with spaces from scripted input
Using fieldformat and rename