Splunk SPLK-1003 Question Answer
Which setting in indexes. conf allows data retention to be controlled by time?
maxDaysToKeep
moveToFrozenAfter
maxDataRetentionTime
frozenTimePeriodlnSecs
https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Setaretirementandarchivingpolicy
TESTED 11 Feb 2026
Copyright © 2014-2026 ACE4Sure. All Rights Reserved