Posted by: Pdfprep
Post Date: December 8, 2020
Which setting in indexes.confallows data retention to be controlled by time?
A . maxDaysToKeep
B . moveToFrozenAfter
C . maxDataRetentionTime
D . frozenTimePeriodInSecs
Answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention
Leave a Reply