Data archiving preserves old logs that might otherwise be removed from an index partition after the retention period. VMware Aria Operations for Logs can store archived data to NFS mounts.

Note:
  • Data archiving happens during log ingestion, as described in Key Aspects of the Event Life Cycle in Getting Started with VMware Aria Operations for Logs.
  • VMware Aria Operations for Logs does not manage the NFS mount used for archiving purposes. If system notifications are enabled, VMware Aria Operations for Logs sends an email when the NFS mount is about to run out of space or is unavailable.
  • Archived log events are no longer searchable. If you want to search archived logs, you must import them into a VMware Aria Operations for Logs instance. For information about importing archived log files, see Import a VMware Aria Operations for Logs Archive.
  • Do not mount NFS permanently or change the /etc/fstab file. VMware Aria Operations for Logs itself performs NFS mounting for you.

For information about enabling archiving in an index partition, see Configure an Index Partition.