To import offline log files, add events to the SmartEvent Server. By default, you can import the 14
most recent days of offline logs. To import more days of logs, change the log indexing settings.

[email protected]:# evstop
[email protected]:# cp $INDEXERDIR/log_indexer_custom_settings.conf $INDEXERDIR/log_indexer_custom_settings.conf_orig

Edit $INDEXERDIR/log_indexer_custom_settings.conf in a text editor.

[email protected]:# vi $INDEXERDIR/log_indexer_custom_settings.conf

Delete these lines;

Delete these lines:
:time_restriction_for_fetch_all ()
:time_restriction_for_fetch_all_disp ()

Add this line;

:num_days_restriction_for_fetch_all_integrated (DAYS)
[email protected]:# evstart

Leave a Comment