Index audit files are being removed from manager

[Gabriel_Rodrigu]

Hi all,

I have the following scenario

Index audit files are being removed from the manager

We have a manager configured to delete old logs when disk space falls below 15% (this is the disk space emergency system). The issue is that, according to the R81.20 Logging and Monitoring Administration Guide, "The Management Server deletes audit log indexes (not the log files) only in a disk space emergency." This means that when disk space drops below 15%, the system deletes the audit index while always preserving the audit file itself.

I would like to know if there is an option to prevent the audit index from being deleted during the disk space emergency process. If this is not possible, the only solution would be to increase the available disk space.

[Amir_Senn · Accepted solution]

No way to avoid it during emergency cleanup AFAIK. Emergency will go for the oldest logs and indexes available to delete.

The only way you can avoid it is by setting daily cleanup that will prevent emergency cleanup from happening or by increasing the disk space as you mentioned.

[Gabriel_Rodrigu]

Hi,

Thank you!

Regards

Gabriel Rodrigues