Exam4Training

Which setting in indexes.confallows data retention to be controlled by time?

Which setting in indexes.confallows data retention to be controlled by time?
A . maxDaysToKeep
B . moveToFrozenAfter
C . maxDataRetentionTime
D . frozenTimePeriodInSecs

Answer: D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention

Exit mobile version