Storage

What can I do here?

In this window, you can configure how logs are stored and manage their size according to disk space.

Tell me about the fields...

  • Measure free disk space in - Choose MBytes or Percentage.
  • When disk space is below <number> Mbytes, issue alert- Get an alert when the available disk space for logs and log index files is below this threshold. This value must be at least 5 MB greater than the value of ...stop logging in the Additional logging options page.
  • When disk space is below <number> Mbytes, start deleting old files- Delete the oldest logs and log index files when the available disk space is below this threshold. This value must be at least 5 MB greater than the ...issue alert value.
  • Run the following script before deleting old files - Enter a path to the script.
  • Apply the following log retention policy - set the number of days index logs are kept for or set an extra number of days to keep log files.

This option is for Gateways only

  • Reserve ... for packet capturing - Some types of logs can also capture the packets that created the log event. Set the amount, in MBytes or Percent, that you want to use for captured packets.

These options and examples are for a Security Management Server or SmartEvent Server only:

  • Index Files - Configure when the Security Management Server or SmartEvent Server automatically deletes old index files:
    • Delete index files older than <number> Days - the Security Management Server or SmartEvent Server automatically deletes index files that are older than a specified number of days. Specify the number of days. The index files are deleted even if there is enough disk space for them.

Examples:

These examples show how these options work together

  • When disk space is below <number> Mbytes, start deleting old files
  • Delete index files older than <number> Days

For these examples, the administrator enables these thresholds:

  • When disk space is below [5000] Mbytes, start deleting old files
  • Delete index files older that [14] Days

Example 1:

The server has 3000 MBytes of free disk space, and 5 days of logs and index files.

The server deletes logs and index files, one day at a time, until there is 5000 Mbytes of free disk space.

Example 2:

The server has 10 GBytes of free disk space and 30 days of logs and index files.

The server deletes all index files older than 14 days.

Example 3:

The server has x days of index files and x+5 days of logs.

The server deletes log and index files, one day at a time, in this order:

  1. Deletes index files older than 14 days
  2. Deletes logs until only 14 days remain, or until the disk space threshold is reached.
  3. Deletes logs and index files until the disk space threshold is reached.

Example 4:

The server has x days of logs, and x+6 days of index files.

The server deletes log and index files, one day at a time, in this order:

  1. Deletes index files older than 14 days
  2. Delete Index files until only x days remain, or until the disk space threshold is reached.
  3. Delete logs and index files, until the disk space threshold is reached.
 

 

Getting Here - Network object properties > Logs > Storage

or:

Network object properties > Logs > Storage