SolarWinds LEM Log Retention Unavailable

Hello,

I have taken over the LEM appliance and am the new administrator for the tool. From my understanding, the LEM appliance should house all of the logs up to a certain date. Our organization has allegedly configured a 365 day retention period. When I do an nDepth search for all logs (no filters), I can only pull back maybe a weeks worth of logs. Does anyone know where the files could be headed or where it can be accessed? I looked at the Hyper-V supporting LEM and I see massive file dumps under the SolarWinds LEM Alert DB Archive, so is this the data?

Please let me know where I could possibly look.

Thank you,

Find more posts tagged with

retention

system logs

solarwinds

audit logs

Accepted answers

All comments

jrouviere

nDepth is usually only going to return about a week or two of data before timing out.

You can use the Database Maintenance Report to check the database retention number in days, then run a search (or a report) for the tail end of that time frame to confirm the data.

Use the LEM Database Maintenance Report to See Retention and Volume of Traffic - SolarWinds Worldwide, LLC. Help and Sup…

Depending on the size of your disk and how much your environment logs over 365 days it could be anywhere from 250 GB of data and up, there's just no way to return all of that in a single search or report.