You can decommission a partition to stop the ingestion of new logs into the partition.

Note: You cannot decommission the default indexed partition.

Prerequisites

Verify that you have a premium or a trial subscription for VMware Aria Operations for Logs (SaaS).
  • If you have a trial subscription, you must activate log partitions before using the subscription. To activate partitions, go to Log Management > Log Partitions and click Enable Partitions.
  • If you have a free subscription, you cannot use log partitions.
  • If you have a premium subscription, log partitions are available by default, and you do not have to activate the feature.
For information about subscriptions, see VMware Aria Operations for Logs (SaaS) Subscriptions and Billing.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Navigate to Log Management > Log Partitions.
  3. Locate the partition that you want to decommission in the Indexed Partitions or Non-Indexed Partitions section.
    Tip: You can also search for the partition by entering keywords in the search text box.
  4. Click the three dots icon against the partition name and click Decommission Partition.
  5. In the pop-up window, click Decommission.

Results

Decommissioning stops the ingestion of new logs into the partition. The partition is active for its retention period starting from the last ingestion date and time. When the partition is active, you can view the partition in the Log Partitions page and query its logs, but you cannot edit the partition. After the retention period, the partition is removed permanently.