Splunk - Purge events based on age
Purge event data older than 30 days in a specific index.
Update indexes.conf
[my-index]
coldPath = $SPLUNK_DB/my-index/colddb
homePath = $SPLUNK_DB/my-index/db
thawedPath = $SPLUNK_DB/my-index/thaweddb
frozenTimePeriodInSecs = 2592000