DaveMcCloud's Posts

Recently upgraded my hosts from 7U3d to 7u3l I've noticed that since the upgrade not all the logs that used to send out to syslog are doing so anymore.  Of main concern is the dfwpktlogs.log entries... See more...
Recently upgraded my hosts from 7U3d to 7u3l I've noticed that since the upgrade not all the logs that used to send out to syslog are doing so anymore.  Of main concern is the dfwpktlogs.log entries as we use them as a way of looking at network traffic being allowed/dropped. I can't see anything about changes that would have made this happen.  I have an SR open but no news on that as yet so wondered if this was something the community have observed.
that was my thinking.  I don't know if vmware have a method so might have to log a ticket
That all ties in with my understanding. What I'm not sure about is what happens with the 100s of buckets that are already full and sealed.  Will they be the first ones to age out? I'm hoping from wha... See more...
That all ties in with my understanding. What I'm not sure about is what happens with the 100s of buckets that are already full and sealed.  Will they be the first ones to age out? I'm hoping from what you say is changing the retention period will archive ALL of the oldest buckets.
As is often the way our pilot deployment went live. We didn't have archiving for loginsight on day one and over time have been throwing more storage at the appliance. Now we have an NFS server to... See more...
As is often the way our pilot deployment went live. We didn't have archiving for loginsight on day one and over time have been throwing more storage at the appliance. Now we have an NFS server to enable archiving on.  I realise that archiving only copies buckets over as they fill and my understanding is it will not copy over my last year worth of buckets - is that correct? My plan was to simply export the first X months worth of data using the export to NFS method.  However what I don't know is how to then remove that X months worth of data from the live loginsight instance. Any ideas or am I simply understanding it wrong?