Events pruning happens at a scheduled time within the TrueSight Infrastructure Management Cell and in the Presentation Server. The events pruning job runs every hour.
Events Pruning at the Infrastructure Management Cell
The following details describe the default behavior of events pruning in the cell:
- Every hour all the closed events older than or equal to 24 hours are pruned from the cell.
- Every hour all the non-closed (open, acknowledged, blackout, and so on) events older than or equal to 30 days are pruned from the cell.
Events Pruning at the Presentation Server
The following details describe the default behavior of events pruning in the Presentation Server:
- As soon as the closed and non-closed events are pruned from the Infrastructure Management Cell, Cell informs the Presentation Server about the pruned events. All those events are pruned from the Presentation Server as well.
- In addition to that, every 24 hours, all the events received by the Presentation Server are compared with the total number of events on the Infrastructure Management Cell. All those events that are present only in the Presentation Server but not on the Cell are removed from the Presentation Server.
You can change the event pruning interval using the Presentation Server tssh component update command.
Where to go from here