If this checkbox is set, then the Event Viewer database synchronization has to be started manually using the SyncProtocol.exe utility or a macro (see The SyncProtocol.exe utility to synchronize event log database and Example of macro to start the Event Viewer databases synchronization).
In the Events archive length field, specify the time period in days for storing the event archive in the Event Viewer database (3). This setting is relevant only for the Server corresponding to the Computer object. To specify the time period for storing the event archive for all Servers in the distributed system, use the common settings in the Programming tab (see The Settings panel of the Security zone object). The value of the Events archive length parameter on the settings panel of the Computer object has the higher priority. If no value is specified in the Events archive length field on the settings panel of the Computer object, the value specified in the settings panel of the Security zone object is used.
The specified Events archive length is also applied to the events received by the Incident server, which are stored in the PROTOCOL_INC_SERVER table of the Intellect database. |
The process of clearing the database of the events older than the specified storage period is started by default every day at midnight. It deletes 100,000 events every three minutes, starting with the oldest ones. |