Splunk search for List of indexes and retention period
Copy
| rest splunk_server=* /services/data/indexes | eval "Retention Period (days)"=frozenTimePeriodInSecs/60/60/24 | table title "Retention Period (days)" | rename title as Index
This search will show the retention period in days for all Indexes
