You can retain log data in index partitions by defining different retention periods for different types of logs. For example, you can define a short retention period for logs with sensitive information. You can also archive the log data in a partition for an extended period of time. If you enable archiving for an index partition, the data in the partition is moved to an NFS mount after its retention period.
Configure an Index Partition You can retain log data in a partition with a filter and a retention period. Index partitions let you define different retention periods for different types of logs. For example, logs with sensitive information might require a short retention period, such as five days. You can also archive the data in an index partition to an NFS mount, to retain the logs for an extended period.
Data Archiving Data archiving preserves old logs that might otherwise be removed from an index partition after the retention period. VMware Aria Operations for Logs can store archived data to NFS mounts.
Import a VMware Aria Operations for Logs Archive Data archiving preserves old logs that might otherwise be removed from an index partition after the retention period. See Data Archiving . You can use the command line to import logs that have been archived in VMware Aria Operations for Logs .
Format of the VMware Aria Operations for Logs Archive Files VMware Aria Operations for Logs archives data in a specific format.
Export a VMware Aria Operations for Logs Archive to a Raw Text File or JSON You can use the command line to export a VMware Aria Operations for Logs archive to a regular raw text file or in JSON format.