Jump to content

Recommended Posts

Tahmeed702
Posted

Dear Kaspersky Community 

Please find the below requirement on storing events for longer period on KSC 

  • We wish to keep all kinds of events in the event repository for a period of six months.
  • Guidance on how to store events in KSC and configure Keswin policy so that events can be stored for a maximum of six months.
  • What kind of database configuration is required in order to store events in KSC ? 
  • Reports should include information from the previous six months if we are able to store events for that long; we want all entries on reports.

Regards

Ahnaf Tahmeed

Renan Corassa
Posted

KES Policies and Administration Servers > Notifications.
Administration Server Properties > Event Repository.

Posted
On 8/9/2025 at 3:29 AM, Renan Corassa said:

KES Policies and Administration Servers > Notifications.
Administration Server Properties > Event Repository.

We have configured the ksc event repository to store more events in the database, and we have also set save events for 180 days in the events configuration settings, but events are being stored only for 30 days, and reports are generating for 30 days only, no matter how many entries we are assigning reports are showing only for 30 days.

Posted

In the KSC properties, go to the Advanced tab and then Current Database Details or something similar.

Verify that the number of logged events matches what you configured in the KSC Server event repository.

Posted
5 hours ago, Renan Corassa said:

In the KSC properties, go to the Advanced tab and then Current Database Details or something similar.

Verify that the number of logged events matches what you configured in the KSC Server event repository.

There is no such config in here 

image.png

Posted

Number Events: 9996

What is the value of the setting: Event Repository?

Remembering that the configured default is: 400,000

Tahmeed702
Posted
On 8/12/2025 at 12:49 AM, Renan Corassa said:

Number Events: 9996

What is the value of the setting: Event Repository?

Remembering that the configured default is: 400,000

I have configured like this 

WhatsApp Image 2025-08-07 at 3.24.13 PM.jpeg

WhatsApp Image 2025-08-07 at 3.51.41 PM.jpeg

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now


×
×
  • Create New...