My index has a retention of 6 months with frozenTimePeriodInSecs=15552000. But I still see some events that are older than the retention.
By example events that are from 6 month and 2 weeks.
Any thoughts ?
↧
Channel:
Latest Questions on Splunk Answers
X
Are you the publisher?
Claim or
contact us
about this channel.
X
0
Channel Details:
- Title: Latest Questions on Splunk Answers
- Channel Number: 11982148
- Language: English
- Registered On: April 15, 2013, 2:15 am
- Number of Articles: 13053
- Latest Snapshot: October 4, 2015, 12:21 am
- RSS URL: http://splunk-base.splunk.com/answers/?type=rss
- Publisher: http://answers.splunk.com/answers/index.html
- Description: The latest questions
- Catalog: //questions509.rssing.com/catalog.php?indx=11982148
© 2025 //www.rssing.com