Exam4Training

Which setting in indexes. conf allows data retention to be controlled by time?

Which setting in indexes. conf allows data retention to be controlled by time?
A . maxDaysToKeep
B . moveToFrozenAfter
C . maxDataRetentionTime
D . frozenTimePeriodlnSecs

Answer: D

Explanation:

https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Setaretirementandarchivingpolicy

Exit mobile version