change defaults for testing - https://github.com/Security-Onion-Solutions/securityonion/issues/3264

salt/influxdb/defaults.yaml

@@ -2,7 +2,7 @@ influxdb:
   retention_policies:
     autogen:
       default: True
-      duration: 2d
+      duration: 1d
       shard_duration: 1h
     so_long_term:
       default: False