I was on a trial sumologic account, and ingesting a single source of AWS cloudfront logs. Really simple, just an S3 bucket with gzipped cloudfront logs. On the trial account I had access to go back 30 days. Trial ended, and data after 7 days disappeared. Now I'm a paid up account, and want to sort of 'start from scratch'. I want to re-import the last 90 days logs, and then let it retain 30 days ongoing. Do I need to just delete and re-add the collector? or any tips of how to re-import the data? can I delete the old messages/logs file entries?
Please sign in to leave a comment.