Hello,
This morning one of our WPM players stopped spawning worker processes, we upgraded to 2025.1 last week and thought we had a bug. Instead, we found over 2 million WPM audit logs under C:\ProgramData\SolarWinds\Logs\SEUM
Looking at Log Adjuster there doesn't seem to be an option to turn this off or set logging thresholds for Audit. Also looking in SolarWinds.SEUM.Agent.Worker.exe.config and SolarWinds.SEUM.Agent.Service.exe.config not seeing anything that pertains to the audit folder.
Is there a way to turn off Audit logging for WPM?
In the meantime, we have setup the following PowerShell script to purge logs within C:\ProgramData\SolarWinds\Logs\SEUM as a job to purge the logs monthly.
# Define the parent log directory path
$logPath = "C:\ProgramData\SolarWinds\Logs\SEUM"
# Get the current date minus 1 day
$cutoffDate = (Get-Date).AddDays(-1)
# Get the computer name
$computerName = $env:COMPUTERNAME
# Check if the directory exists before proceeding
if (Test-Path $logPath) {
# Get log files older than 1 day (including subfolders like Audit)
$deletedFiles = Get-ChildItem -Path $logPath -File -Recurse | Where-Object { $_.LastWriteTime -lt $cutoffDate }
if ($deletedFiles) {
# Delete the files and log them
$deletedFiles | ForEach-Object {
Write-Host "Deleting: $($_.FullName)"
Remove-Item -Force $_.FullName -ErrorAction SilentlyContinue
}
Write-Host "Cleared old logs in: $logPath and its subdirectories on $computerName."
} else {
Write-Host "No logs older than one day found in: $logPath on $computerName."
}
} else {
Write-Host "Directory not found: $logPath on $computerName."
}
