The event count between the Presentation Server and the Infrastructure Management Server do not match

The number of events displayed in the TrueSight console and the Infrastructure Management operator console do not match.

In case your environment has a large event flow and the mcell.conf at the Infrastructure Management Server has a lower setting for EventDBSize (default is 360000), older events get pruned automatically irrespective of Severity or Status. You are able to view events in the TrueSight console that you cannot view in the Infrastructure Management operator console. You cannot perform any actions on these events.
The Infrastructure Management JServer retains pruned events for more than 20 minutes after events are pruned in the cell.

The Presentation Server has a self-pruning period (EVENTS_PRUNING_PERIOD) to prune events.

Events are pruned at the Presentation Server as follows:

Closed events are pruned based on the MC_CELL_DB_CLEANUP events arrival.
In the absence of MC_CELL_DB_CLEANUP events, the Presentation Server prunes closed events every 24 hours by default.
To change the closed events pruning interval, run the following commands from the installedDirectory\truesightpserver\bin directory:
tssh properties set closedEventsPruningPeriod <value in minutes>
tssh properties reload
Non-closed events are pruned if there are no updates to the event for more than 30 days.
To change the non-closed events pruning interval, run the following commands from the installedDirectory\truesightpserver\bin directory:
tssh properties set nonClosedEventsPruningPeriod <value in minutes>
tssh properties reload

Related topics