Separate prod and nonn prod data into different indices (but same source types)
Adjust retention periods as needed on each index
Clone and edit prod KOs for nonprod envs
March 11, 2020 at 12:53AM
via reddit https://www.reddit.com/r/Splunk/comments/fgrkms/how_can_i_monitor_qa_or_nonprod_or_preprod/fk6hl5z?utm_source=ifttt