- Community Home
- >
- Networking
- >
- IMC
- >
- Syslog and NTA database space used
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2013 04:33 AM
07-11-2013 04:33 AM
Hi,
Does anyone know how to increase the space used for storing syslog messages as well as flow information in the NTA module?
I have plenty of disk space and there are no limits on database file sizes (I'm using Microsoft SQL Server 2012). However IMC does not want to use more than 274MB for syslog messages. Simmilar thing happens for the NTA module.
Solved! Go to Solution.
- Tags:
- syslog
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2013 03:26 PM
07-11-2013 03:26 PM
Re: Syslog and NTA database space used
I'm not sure about NTA, but have you changed any of the settings at System -> System Configuration -> Data Export?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2013 11:43 PM
07-11-2013 11:43 PM
Re: Syslog and NTA database space used
Nope, no settings changed in "System -> System Configuration -> Data Export".
However, according to manual: "This function helps you export the operation logs, alarm (and other data need to export) automatically. The operation logs, alarms (and other data) meeting the export criteria are backed up and exported to the specified path, and the exported data is deleted from the system."
If data will be exported to an external system it will become unsearchable through IMC.
I'm interested in storing larger amounts of data withing IMC though.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-11-2013 11:55 PM
07-11-2013 11:55 PM
SolutionOf course, it could also be a DB limitation you're hitting - I don't normally have that volume of syslogs to deal with!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-12-2013 12:43 AM
07-12-2013 12:43 AM
Re: Syslog and NTA database space used
Thank you for your replay.
I have disabled all export settings. I'll let you know if I see any changes.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2013 10:14 AM
07-14-2013 10:14 AM
Re: Syslog and NTA database space used
You were right LindsayHill. Disabling the export feature made IMC increase the syslog database size and store more messages.
Thank you for your help.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2013 01:38 PM
07-14-2013 01:38 PM
Re: Syslog and NTA database space used
Good to hear that it's working.
For the NTA space, try altering some of the parameters at Service -> Traffic Analysis and Audit -> Settings -> Parameters. I think that should give the same effect.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-18-2016 01:28 AM
04-18-2016 01:28 AM
Re: Syslog and NTA database space used
Hi all,
I have installed iMC and NTA in a distribute enviroment with remote database, and there is no way to configure "data export". What is the behabiour about the data base space management? Does iMC automatically remove old logs? Do I have to make some manual manteinance?
Thanks in advance