Off-boarding all logs greater that 120 days to S3

Follow

Ken Burstall

• January 28, 2019 12:11

Is there a way to export/offboard all logs or entries older than 120 days currently in Sumo for long term data retention  

 

Thank you 

Ken

0

• Official comment

  

  Rahul Choudhary

  • March 05, 2021 06:37

  Retention is measured from the time that data was received, rather than the message time. 
  
  The minimum retention period is 1 day, and the maximum retention period is 5,000 days and is set on the partition where the logs are routed.
  
  For more info:https://help.sumologic.com/Manage/Partitions/Manage_Indexes_with_Variable_Retention
  
  Hope that answers your question.
  
  Regards,
  Rahul

   

   

  Comment actions Permalink
• 

  Chi Nguyen

  • February 08, 2019 18:13

  Hi Kenneth, 

  You can export using Search Job API.  There are instructions and examples on this doc: https://help.sumologic.com/APIs/Search-Job-API/About-the-Search-Job-API

  0

  Comment actions Permalink
• 

  Piotr Woch

  • February 08, 2019 18:55

  Kenneth,

  In addition, if you set a partition to 120 days of retention, all data older than that will get automatically deleted from that partition.

  Please feel free to email me directly @ piotr@sumologic.com if you have any further questions.

  0

  Comment actions Permalink
• 

  Magesh Rajan

  • March 05, 2021 06:31

  what's the maximum number of days we can set it for partition. Is this retention period is for search or storage ?  

  0

  Comment actions Permalink

Please sign in to leave a comment.