find /opt/splunk/var/lib/splunk/firewall/db/ -type f -mtime -7

#!/bin/bash
name=$(date '+%y-%m-%d')
tar -zcf /opt/splunk/var/backups/splunkbackup$(date '+%y-%m-%d').tar.gz
/opt/splunk/etc /opt/splunk/var/lib/splunk/firewall
/opt/splunk/var/lib/splunk/ossec /opt/splunk/var/lib/wineventlog
/opt/splunk/var/lib/cb
rsync -avz --remove-source-files /opt/splunk/var/backups/splunkbackup*
svc_splkbup@HOST:/var/log/splunk/backups/indexer