Off-boarding all logs greater that 120 days to S3
Is there a way to export/offboard all logs or entries older than 120 days currently in Sumo for long term data retention
Thank you
Ken
-
Official comment
Retention is measured from the time that data was received, rather than the message time.
The minimum retention period is 1 day, and the maximum retention period is 5,000 days and is set on the partition where the logs are routed.
For more info:https://help.sumologic.com/Manage/Partitions/Manage_Indexes_with_Variable_Retention
Hope that answers your question.
Regards,
RahulComment actions -
Hi Kenneth,
You can export using Search Job API. There are instructions and examples on this doc: https://help.sumologic.com/APIs/Search-Job-API/About-the-Search-Job-API
-
Kenneth,
In addition, if you set a partition to 120 days of retention, all data older than that will get automatically deleted from that partition.
Please feel free to email me directly @ piotr@sumologic.com if you have any further questions.
Please sign in to leave a comment.
Comments
4 comments