Is there a default retention period?

Beginning with EventSentry 3.0, during the installation you're presented with an option to customize an automatic retention policy of your EventSentry database. The default for this was seven days and has recently increased to 30 days by default for newer installations. The retention period can be modified at any time.

In the example above, you can see that the automatic retention policy will keep 30 days worth of data, and it will run nightly at 11 pm. This also sets up a directory monitoring you monitor your EventSentry data directory to notify you if this gets above 10GB; all these options can be modified later.

If you need to change the retention settings, you can go into Tools > Embedded Scripts (Starting in version 4.2 this is under Home > Scripts > User Embedded) and edit the auto_db_purge.cmd:

To change the number of days kept, you'll edit the option 30d; if you'd like to keep a year, you can change that to 365d.

You can also change when you get notified about the size of your EventSentry data directory, you can edit these settings under SYSTEM HEALTH > DATA PURGE > DISK SPACE and then clicking the "Directory Monitoring" tab and then double click the item listed and then you can change the "Alert if" options.