Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Daniel_Taney
Advisor

Can Someone Explain "Keep Log Files For An Extra..." Setting in R80.40 Management?

Jump to solution

As the subject states, I was hoping someone might be able to give me a little deeper insight into exactly what this setting controls. 

2020-06-10_10-51-24.jpg

Is it safe to assume this refers to the flat log files that reside under $FWDIR/log on the log server? Since this particular server is intended for Management and short-term log storage, my goal was to only keep a week's worth of log files and indexes on this VM. If logs were needed beyond the 1 week period, I have a separate log server with a longer retention policy. 

So, with that goal in mind... if I only want 1 week's worth of logs, should I change this setting to "1 day" taking it to mean the log files would be kept for 1 day longer than the Indexes? Or would this need to be set to "8 days" to imply they should begin to roll off after the 7 day period. 

Hopefully that makes sense? 

Thanks!

Dan

R80 CCSA / CCSE
2 Solutions

Accepted Solutions
Shay_Hibah
Employee
Employee
Hey Daniel,
How are you?

I will give you the correct answer 🙂
When you set "keep logs for an extra.." to 1 it means that raw logs will be saved for an additional 1 day compared to indexes ("keep indexed logs").
Meaning that if you want to save indexes for no longer than 7 days and log files for 8 days, you need to set the first box to 7 and the second to 1.

Please let me know if you need any additional assistance,
Shay

View solution in original post

4 Replies
Daniel_Taney
Advisor
TBH, I didn't bother looking in the Admin Guide, because all this detail doesn't come up with you look at the online help in SmartConsole for that screen. So, I just (wrongly) assumed the Admin Guide also wouldn't mention the field. Regardless, thanks for pointing this out and it does appear that the setting behaves as I assumed it would.
R80 CCSA / CCSE
Shay_Hibah
Employee
Employee
Hey Daniel,
How are you?

I will give you the correct answer 🙂
When you set "keep logs for an extra.." to 1 it means that raw logs will be saved for an additional 1 day compared to indexes ("keep indexed logs").
Meaning that if you want to save indexes for no longer than 7 days and log files for 8 days, you need to set the first box to 7 and the second to 1.

Please let me know if you need any additional assistance,
Shay

View solution in original post

Daniel_Taney
Advisor
Thank you! This is the exact answer I was hoping for!
R80 CCSA / CCSE
0 Kudos
Reply