Exercise caution because increased logging can significantly increase the total size of your event logs. Increase the logging level and record more events for troubleshooting purposes. They don't include event logs from agents installed on your network's web servers. Server Log files are from Deep Security Manager's web server. They are used to generate reports and to populate the dashboard widgets.

Most settings indicate the maximum age of protection modules' event logs, but Counters are the total number of each type of event log. ** Note: To delete Software Versions or Older Rule Updates, go to Administration > Updates > Software > Local or Administration > Updates > Security > Rules.

To view and update these settings, go to Administration > System Settings > Storage. The table below shows defaults for storage. See Configure log inspection event forwarding and storage.ĭeep Security Manager provides you with a default data retention setting of seven days for almost all events, with the exception of system events, which is set to 'Never'. Referred to as 'severity pruning' in the Deep Security documentation, this allows you to send events to a syslog server (if enabled) or to store events based on the severity level of the log inspection rule. Set up thresholds in the log inspection module for event storage or event forwarding. This will allow you to lower your retention time on the Storage tab, if necessary. Set up forwarding of system and module events to a syslog server or SIEM, see Forward Deep Security events to an external syslog or SIEM server. Set system events storage to the compliance standard requirement. Symptoms that you may be storing too much data for your database are the following: error messages that systems may be experiencing loss of database activity, an inability to import software updates, or just a general slow-down working in Deep Security. Storing too much data may affect database performance and size requirements. As well, you need to consider optimizing the use of your database. Best practices for log and event data storage depend upon the data compliance regulations you must meet, for example PCI and HIPAA.

Best windows logger