Allow SEM to drop events or log as SEM agent are forwarding every single logs and some logs are not security events, this cause the disk space to fill up quickly ...
You could do this under the old flash console by going to Manage ->Appliances ->Click on the gear next to the manager name and select policy.
never-displayed
