Data Retention

If the destinationLogLogic LX Appliance becomes full during a Replay session, standard data retention rules for the appliance apply.

That is, the oldest files are purged to make room for the new messages coming in from the Replay session. It is good practice to configure data retention for the LogLogic LX Appliance you are using to handle Replay sessions.

The retention time is counted from the time the log data was generated by the original log source.

If everything is set to the same expiration policy (for example, 1 year), then the oldest file is purged. However, when an appliance is configured with multiple different retention policies, files with the earliest expiration date are purged first. For example, files that are set to expire in one week are deleted under emergency purging circumstances before files that expire after one year and 10 months.