Carbon Black App Control event data is stored in a SQL Server database, and expands at a rate that corresponds to file activity on your network. The Events tab provides two sets of options for managing events data generated byCarbon Black App Control .

  • The Event Log Management panel provides options for managing the size of the primary Carbon Black App Control Server database and for archiving events.
  • The External Event Logging panel provides options for enabling supplemental external logging of Carbon Black App Control events to another SQL Server or a Syslog management server. Use of supplemental external logging can reduce the amount of data you keep in the primary database.

The Event Logging panel on the System Configuration page

Caution: Disk capacity and the availability of an external SQL Server database for storing Carbon Black App Control data can determine your event log management decisions. Consider these conditions before making any changes to your logging configuration.