You can configure VMware Aria Operations for Logs (SaaS) to archive log data if you want to retain logs older than 30 days, which is the default retention period. For example, production logs are more crucial and you can retain them for a longer period, such as a year, and you can retain test logs for a shorter period, such as six months.
Non-indexed log partitions ingest logs and store them based on the policies or rules that you define for each partition. Similar to log archival, you can specify a retention period for each partition rule, which is the number of days for which you want to retain the logs. For more information, see Log Partitions.
Procedure
- Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
- Navigate to .
- Click New Configuration.
- Provide the following information:
Option Description Name A unique display name for the log archival configuration. Query Filters log messages to archive the logs that contain the text you enter. At least one filter is required.
To add more filters, click Add Filter. Optionally, click the magnifying glass icon to preview the filtered results.
Retention Days The number of days for which you want to retain the logs. Note: VMware Aria Operations for Logs (SaaS) can retain log data for a minimum period of 90 days, up to a maximum period of seven years. - Click Save.
