We setup the System Event Viewer in the WebConsole for reviewing appliance logs centrally.
After doing so, we saw the database balloon in size, it appears the purge settings were not operating successfully.
Does anyone know how this purge is supposed to work?
Is there a daily scheduled action that runs? A scheduled overnight job? Or is the purge expected to continually happen such that only the last X days of data is retained?
Hello
Once “Enable System Event Database Recording” has been enabled in Support | Event log settings the purge should occur based on the settings in Support | Event Log Settings.
You may not want to keep more than a few days of logs in the database.
The logs are stored in this table [RetinaCSDatabase].[logs].[ServiceLogging]
And get purged by the omniworker process every night at midnight.
If you look in a support pack you should see something similar to the following in the omniworker_general2025xxxx.txt log.
2025-11-06 00:00:00.589 -04:00 [Information] (90) DatabaseLogPurge There are XX database log records to delete older than X days
If you do not think the purge process is working properly please open a case with the BeyondTrust support team and submit a Support Package when opening the case.
Regards,
John
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
