1 Reply Latest reply on Nov 17, 2011 5:46 AM by sandwind

    Documentation clarification re:automatic deletion of older alert and packet log data

    dmease729

      Hi All,

       

      p41 of Manager Server Configuration Guide (v6.1) states "You can use the purge.bat utility or the dbadmin.bat utility for alert and packet log data maintenance.  Thus, if possible, do not schedule disk space maintenance with respect to alert and packet logs.".  The disk space maintenance referred to seems to be the settings above this statement on the same page, namely "IPS Settings | Maintenance | Alert Data Pruning" - is this recommending that this Alert Data Pruning setting should not be used via the GUI (preferably), and if this is is the case, what are the cons to enabling this feature, and does this suggest that all maintenance regarding alert and packet log data should be done manually?

       

      I have read the page a good few times now, but cannot seem to get to the point trying to be made...

       

      Thanks in advance!

        • 1. Re: Documentation clarification re:automatic deletion of older alert and packet log data
          sandwind


          dmease729 wrote:

           

          Hi All,

           

          p41 of Manager Server Configuration Guide (v6.1) states "You can use the purge.bat utility or the dbadmin.bat utility for alert and packet log data maintenance.  Thus, if possible, do not schedule disk space maintenance with respect to alert and packet logs.".  The disk space maintenance referred to seems to be the settings above this statement on the same page, namely "IPS Settings | Maintenance | Alert Data Pruning" - is this recommending that this Alert Data Pruning setting should not be used via the GUI (preferably), and if this is is the case, what are the cons to enabling this feature, and does this suggest that all maintenance regarding alert and packet log data should be done manually?

           

          I have read the page a good few times now, but cannot seem to get to the point trying to be made...

           

          Thanks in advance!

          Hello dmease729

           

          I think managing alerts manuall is possible but it is not so usefull becasue we got other tasks in life than sitting and clearing manually alerts in NSM .

           

          We got set this normally for automatic deletiion of acknowledged alerts older than X. Works very nice.  For some extra work you can use manual way(it can be useful in some not standard situations)  but normally on regular basic forget about it.