Remove/Delete old log datas from RSA Netwitness Archiver

[DevarajMohan1]

Hi Team,

We having 7 months of data in archiver how to delete the old log data from archiver lets say we need to delete old 3 months of data from the archiver.

Regards,

Devaraj

Inspirisys Solutions Limited,

India.

[NandakumarVadiv]

Hi Devaraj,

Use timeroll option in services explore view to purge old logs. 

1. Select the Explorer view on the archiver service, collections, collection name, and select Database.
2. Right-click on Database and choose Properties.
3. On the lower section of the screen will be the section Properties for Archiver(archiver/collections/<collection name>/database).
4. Click on the pulldown next to Parameters.
5. By default, ls the option, click on the pulldown and select timeRoll.
6. In the parameter window, enter a database value to pass to timeRoll and hit send.Example:- Based off of 92days 

         type=meta days=92 

         type=packet days=92

         type=session days=92

Regards,

Nandakumar