Log and Index File Maintenance

In This Section: Managing the Log and Event Database Minimum Disk Space

Managing the Log and Event Database

SmartEvent and Log Server use an optimization algorithm to manage disk space and other system resources. When the Logs and Events database becomes too large, the oldest events are automatically deleted to save space.

Minimum Disk Space

The Security Management Server or Log Server with log indexing enabled, creates and uses index files for fast access to log file content. Index files are located by default at $RTDIR/log_indexes.

To make sure that there is always sufficient disk space on the server, the server that stores the log index deletes the oldest index entries when the available disk space is less than a specified minimum. The default minimum value is 5000 MB, or 15% of the available disk space.

To change the minimum available disk space for Logs and indexes:

1. In SmartConsole, edit the Security Management Server or Log Server or SmartEvent network object.
2. Open Logs > Storage.
3. Select When disk space is below <number> Mbytes, start deleting old log files.
4. Change the disk space value.

   Note - In a Multi-Domain Security Management environment, the disk space for logs and indexes is controlled by the Multi-Domain Server, and applies to all Domain Servers. Configure the disk space on the Multi-Domain Server object.