Ability to delete logs after 3, 6, or 12 months.
Ability to delete logs per type at different intervals. For example, keep failed logons for a year, but IIS logs for 6 months.
I used to use LogLogic and they allowed retention based on "type" of log, such as ASA or router or Routing protocol. This is something that I feel is important because many logs are for troubleshooting only and retention over a week is a waste of space.
Loglogic just had a simple page with checkboxes and timeframes that would translate to a query that would run nightly and delete items older based on the criteria....
2 and a half years.... bump :-)
help me #bumpsquad, your my only hope.....
Now that I'm using LEM I need all this stuff too... bump
bump
This would be very helpful at managing LEM storage and I assume this setting could be set at the Appliance Policies page for each event or event group.
This would be nice to have when dealing with data that must be retained for a specific time period due to compliance requirements.
This feature request was raised 7 years back and still not deployed till now. This is a compliance requirement which SolarWinds claim to be compliant with. Dev team should consider this as an important feature request.