Retention is always based/calculated on receipt time regardless of what is parsed out for message time.
- Why my compressed .gz file is not being ingested by local file source?
- Receiving error "Multiple definitions found for function formatDate(String, String)" using the formatdate operator. How to resolve it?
- How can we send logs from Sophos (Anti-Virus) to Sumo Logic using the Sophos API management Feature?
- How to return the week number of the year for a timestamp?
- Is there any extra data cost when using Partition/Scheduled View?