timmermd Hi there, our Splunk server stayed up all weekend, seems the increase in memory did the trick.
timmermd I have a new question for you though...
timmermd I am trying to figure out how to limit the date of log entries.
timmermd I found documentation about modifying the multiIndexer.xml doc
Ruaidhri you want you indexer toi age out data when it becomes x days old so it doesn't show up in search results ?
timmermd I need to work on purging old data (indexes, logs, everything).
timmermd Just to test, I set frozedTimePeriodInSecs to 172800
timmermd thinking it would remove anything older than 2 days.
timmermd But so far it hasn't removed anything and I did this several hours ago.