IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: How to Change Agent Event Retention

App Control: How to Change Agent Event Retention

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Objective

To change the number of events an Agent keeps before purging.

Resolution

  1. Log in to the Console and navigate to https://ServerAddress/agent_config.php
  2. Click Show Filters > Value > contains > report_event_max_size > Apply
  3. Click View Details (pencil icon) and adjust the Value accordingly. Example:
    report_event_max_size=7500
  4. Verify the Status shows as Enabled, then click Save.
  5. Change the Filter > Value > contains > report_event_prune_percent > Apply
  6. Click View Details (pencil icon) and adjust the Value accordingly. Example:
    report_event_prune_percent=8
  7. Verify the Status shows as Enabled, then click Save.

Additional Notes

  • These settings are set to Disabled by default which forces the hardcoded values specified.
  • By default the max Events stored are 5,000 (report_event_max_size=5000)
  • By default the max percentage of Events pruned is 10% (report_event_prune_percent=10)

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎11-20-2018
Views:
978
Contributors