cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post

Ability to Control Log/Event Retention

Ability to Control Log/Event Retention

Ability to delete logs after 3, 6, or 12 months.

Ability to delete logs per type at different intervals.  For example, keep failed logons for a year, but IIS logs for 6 months.

Tags (1)
8 Comments
Level 16

I used to use LogLogic and they allowed retention based on "type" of log, such as ASA or router or Routing protocol.  This is something that I feel is important because many logs are for troubleshooting only and retention over a week is a waste of space. 

Loglogic just had a simple page with checkboxes  and timeframes that would translate to a query that would run nightly and delete items older based on the criteria....

Level 16

2 and a half years....  bump  🙂

Level 16

help me #bumpsquad​, your my only hope.....

Level 20

Now that I'm using LEM I need all this stuff too... bump

Level 20

bump

Level 10

This would be very helpful at managing LEM storage and I assume this setting could be set at the Appliance Policies page for each event or event group.

Level 9

This would be nice to have when dealing with data that must be retained for a specific time period due to compliance requirements.

Community Manager
Community Manager
Status changed to: Open for Voting