Configuring Log Retention Days in VCF Operations for Logs 9.1

Log retention has been streamlined in VCF Operations for Logs 9.1. In order to set the retention period for logs, first you must understand how to set up partitions.

We can create partitions by going into Operate > Administration > Log Processing. In Log Processing, click the Partitions tab. You will see a Default partition where all events go. Retention is by default set to 0 which means that logs will be retained indefinitely (or so long as your storage allows). Additionally, we can add in our own partitions if we would like to adjust the retention periods for specific subsets of logs. Partitions are especially useful when archiving logs. You can see that you can also set the archival location for each partition.

Click Add:

Lastly, there is a way to import logs from an archived location. Under Operate > Administration > Log Processing, click the Partitions tab. Here you will see an ability to Initiate New Log Import  from any archived logs. This will make the logs available for querying and analysis:

Hope this helps!