PurgeWhenFull issue

larrylamb · Post by **larrylamb** » Thu Jan 10, 2008 4:44 am

I have 5 systems running 1.22.3 on Ubuntu 7.10 64 bit. I have two that do not purge when full, three that do purge. I set the filter to delete the matches and run in the background, but some of these do not seem to actually execute. Once the partition fills, it crashes the server and I end up reloading the system. Is there a step by step procedure to make sure that the filter runs... I must be doing something wrong or out of order.

jameswilson · Post by **jameswilson** » Thu Jan 10, 2008 5:38 pm

id check your logs to see if your filter is failing, also other incorrectly setup filters can cause purge (well all filters) to pause.

its also possible that your not deleting enough and its filling faster than it removes

Lee Sharp · Post by **Lee Sharp** » Thu Jan 10, 2008 10:28 pm

I few time I have set it to run but forgot to actually check the box to delete events. Doh!

skyking · Post by **skyking** » Fri Jan 11, 2008 3:01 pm

My system has only been up a week, as of later this morning. There is no need to purge yet, having used only 29% of the disk space up.
I do have one monitor that has about 18,000 events in a very busy hallway, using the default zone settings. What would you do to merge some of those events together, so as to keep below the 32,000 event limit? I have a little disk space to spare to record longer events.
I'd rather end up with a uniform recorded events period, rather than have to trim that monitor alone.