I ran into an issue where only 2 days were showing on my clients servers logs (in Labtech) although i have set the software to keep 31 days.
Labtech looked into it and found the EVENT.LOGS table has 100 Million Rows and about 50Gb, so this caused things not to work.
The Fix was to Truncate the table and then monitor for the most noise from a possible rogue client and go from there.
All that is done, and we have noticed after 2 days, the Database has 10 million rows and is 5gb in size.
Anyone have a similar issue?
We are going to setup a template not to collect security logs on workstations, however it seems to defeat the purpose that the system cant handle the logs it needs.
after 2 days we have about 100 agents producing 20,000 logs and most of that is Security followed by System