If archiving is enabled, the event data is copied to the archive location after two days, and a local copy remains until space is available. Raw data is moved to the archive location after approximately one hour.
Log in to Sentinel Log Manager as an administrator.
Click thelink in the upper left corner of the page.
In thesection, the field displays the total storage size currently used by Sentinel Log Manager.
Specify the local storage utilization value:
Specify a value to start the data storage from local storage when the specified value is reached.
Specify a value to stop the data storage from local storage when the specified value is reached.
These settings are the settings at which Sentinel Log Manager starts (and stops) deleting the duplicate data files that are in online storage. These copies are kept online until this disk usage threshold is reached in order to speed up searches and reports. When the threshold is reached and files are deleted, the archive becomes the sole location for the data.
Networked storage size specifies the value of the archive storage space.
Specify the maximum archive size to be used as part of the total available archive size.