fikretbaydilli1 Trusted Contributor.
Trusted Contributor.

Express's Event log archive problem (Reducing Size)


We are using Arcsight Express. Our event log archive size (daily) was between 2 and 4 gigabytes. When the disk is full i move the files to another location. However last couple of weeks our event archive size increased to 10 - 13 gigabytes. This is a very big size and since arcsight's event log archive disk size is 200 gb it is getting full nearly 20 days.

A couple of weeks ago i added new connectors and our eps increased, i think this is the reason. How can i reduce the size of the event log archives?

Thanks in advance.

Labels (2)
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.