NLS retention question
Posted: Tue Sep 04, 2018 1:48 pm
Hello all!
i have a question about NLS retention.
Is it possible to have NLS archive certain log files and not others?
Here is the scenario:
I have cisco ASA, syslog and windows event logs being sent to NLS.
However, I would like to configure NLS so that 180 days of ASA files be actively searchable, but only 3 days of the other two file types be available with in our 2 node our cluster.
i have a question about NLS retention.
Is it possible to have NLS archive certain log files and not others?
Here is the scenario:
I have cisco ASA, syslog and windows event logs being sent to NLS.
However, I would like to configure NLS so that 180 days of ASA files be actively searchable, but only 3 days of the other two file types be available with in our 2 node our cluster.