Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Log & Event Manager (LEM) > Change default syslog retention value in LEM

Change default syslog retention value in LEM

Table of contents

Updated June 16, 2017

Overview

This article provides steps to increase the default syslog retention settings from the default value of 50 days to any value under 100 days. This means that syslog-ng will start dropping files when the count reaches 100, starting with the highest number.

Environment

LEM 6.x

Steps

  1. Log in to the CMC Console using the following:
    • user name: cmc
    • password: password (or the password you have set)
  2. Enter appliance.
  3. Enter limitsyslog.
  4. Follow the instructions to change the retention period from 50 days to any value between 0-100 days.

Notes:

  • This will not have any impact on how data retention settings of a normalized alert DB, which is what LEM uses for nDepth search and Reports.
  • Ensure that your LEM has enough space in the log/data partition.
  • Observe for any abnormal syslog file size growth as it can fill up the log/data partition quickly if left unchecked.

 

 

Last modified
21:59, 15 Jun 2017

Tags

Classifications

Public