Removing old logs from AM
Is there a way to remove old logs or any old unneeded data from AM as all my servers seem to be growing and growing?
I have changed the archive audit logs down to 30 days for online and offline for all logs and its set to purge and export but in VMware all the servers are growing daily.
- Cloud Auth
- Cloud Authentication
- Cloud Authentication Service
- Community Thread
- Forum Thread
- RSA SecurID
- RSA SecurID Access
I have the same issue and it has carried over from 8.1 to 8.2. Only manual archives seem to work. I currently have a case open but before they escalate to engineering they are asking to patch to 8.2 SP1 Patch 5. I'm hoping there's a simpler answer.
O right, so you think the schedule isn't working? Only choosing Archive now works? I have changed this and the number of days in the system log from the ops console but servers are still increasing in size daily
You should contact Customer Support if you are not able to get scheduled backups working. Just to be clear, there are four different functions. "Archive Now" and "Schedule Log Archival" (from the Security Console) work specifically with the audit logs. "Back Up Now" and "Schedule Backups" (from the Operations Console) perform complete database backups.
Many customers create a remote file share (Windows or NFS) and create scheduled job to perform the backup. You can configure the backup job to securely write the encrypted backup on the remote file share and avoid filling the local storage on your appliance. All other server logging has configured limits and attains a "steady state". It should never exhaust the storage on your appliance.I assume you have pre-allocated the VMware storage as recommended; there are a number of performance and reliability issues associated with dynamically allocated storage in VMware.
You may also want to configure the "Low Disk Space Events" notification mechanism. This is configured in Setup > System Settings > Critical System Event Notification and can generate an email notification if your server is getting low on available space.