i need to perform a complete backup of all the event log on my ESM machine.
I am trying to run reports from the web interface and saving them to a remote CIFS share. The problem is that the report writes just 500KB of CSV file (that is 2 days of log) and not all the log of the log source.
Pretty sure there is some more clever way to do this but I am not aware of which this is.
Is there anyone who already performed this?
Many thanks in advance
Reports are ran only on the events which are inside the retention period. If you can see the events inside the dashboard but not inside the report it means that you didn't specify the time-window when you've created the report.
On the report i specified to do not apply any filter on the retention period.
What i need to do is to extract all the logs from the log source. And i need to do this action for all the log source in my ESM.