Dear Team,
We observed SolarWinds Orion logs has consuming more space also please let if we can delete old logs ?
You don't need a script - just go here and set your retention values to what you need...
Default retention of Logs, Syslogs, and Traps is 7 days. You will need to look at Log Analyzer to determine what is sending you those excessive logs and either have that stopped or create rules to remove them Check out this KB -solarwindscore.my.site.com/.../Truncate-the-SolarWindsOrionLog-tables
Actually, I may have got that slightly wrong... you may need to look at this page:
...
Both @Daran and @stevenstadel are correct. But then go in a sequential order
1. Go to Alerts & Activity -> Syslogs -> Settings -> Retention (Check if its the default 7 days or more, if its more - can you reduce this ? If yes do it)
2. Try to find out what's bombarding your environment, why is the DB size growing ? This can as well impact your environment and cause a performance issue again Alerts & Activity -> Syslogs (Check for the pattern, are there too many syslogs from a particular device or vendor or machine type, if yes do you still need them?)
3. If you see a bunch of them which are not required then create a custom rule to discard those syslogs, Alerts & Activity -> Syslogs -> Settings -> Processing Policies -> Syslogs -> My Custom Rule (create a rule to discard unwanted syslogs based on your analysis from point 2), this info is available in the link that has been provided by steven
4. Lastly if nothing works out then get rid of it from DB, this info is available in the link that has been provided by steven (this is the last possible option that I would go with)
Hope this helps.
