Ed Eades

Difference between log files and log indexes

Discussion created by Ed Eades on Jul 17, 2018
Latest reply on Jul 17, 2018 by Aleksei Shelepov

I am trying to understand the difference between log files and log indexes in terms of retention.  We have a management server setup for Logging&Status, SmartEvent Viewer, and Correlation Unit.  Log indexing is enabled and set to alert when space is below 20% and delete old files below 22%.  Index files is set to delete older than 7 days. The  folder /opt/CPrt-R80/log_indexes  shows 7 days worth of index files.  However the folder /opt/CPsuite-R80/fw1/log shows log files going back several months.  We have cleared out log files from this folder before.  With indexing set to delete older than 7 days we can only go back 7 days on reports but the log files themselves go back past 7 days.  I am trying to understand the difference between the log files themselves and the indexing retention.

 

Thanks.

Outcomes