The data in Splunk is now subject to auditing and compliance controls. A customer would like to ensure that at least one year of logs are retained for both Windows and Firewall events. What data retention controls must be configured?
I think we practiced a similar question where we had to configure data retention for compliance. I feel like "frozenTimePeriodInSecs" is definitely involved.
Stefanie
7 months agoAndra
7 months agoAliza
7 months agoWhitley
7 months agoBeckie
7 months agoAileen
8 months agoMerilyn
8 months agoTruman
8 months agoDick
8 months agoCharlene
8 months agoKris
8 months agoSolange
8 months ago