I'm looking for some clarification concerning the log files used in sophos ESDP(I have researched this a bit, but have so far come up nearly empty in my search attempts). Our environment is Enterprise Console 4.5 on 180 clients. The goal of this is to have the ability to immediately provide 3 months of "audit-trails" for sophos log generations for a security audit. Additionally, we would need to have the log files retained for at least a year. Storage space is not an issue, in my mind the more logged information we can provide the better.
On to my question on retention(2 - part question), the first being is there a default amount of time a log is retained on the clients or is this dictated by the amount of disk space devoted to the aforementioned log files. If there is a way to set the amount of time a log file is retained, how would one go about accomplishing this?
My second question is concerning the possibility of having the log files be pulled to a central syslog server. If this option is available then the retention of the log files on the local machine is no longer relevant as they would be stored on a syslog server where we could retain them for the required period of time.
Thank you in advance
This thread was automatically locked due to age.
