|Home > User Guides (for AMP) > Log Management|
Instead of logging into your virtual machine, you can use the Log Management screen to review information about the Armor Agent, such as log status and event types. You can use this screen for every system protected by Armor to:
This screen only contains information about virtual machines that have been fully provisioned with the Armor Agent with the log management service enabled.
|By default, the Armor Management Portal (AMP) retains log status and details for the previous 90 days. To review logs older than 90 days, see Configure log retention plan.|
By default, logs are retained for 90 days. You can increase log retention rate to 13 months.
You can also purchase an upgraded log retention plan in the Marketplace. To make a purchase, see Order an add-on product.
You can export logs to analyze the offline or to provide to an auditor.
|Data Type||Data Detail|
|Vm Name||This data shows the name of the Armor Agent.|
|Last Log Date||This data shows the last date that Armor received logs. A blank entry indicates that the action has never taken place.|
|Vm Provider||This data shows if you are an Anywhere or Complete user. If Armor cannot determine your specific environment, such as AWS or Azure, then by default, this entry will say Anywhere.|
This data shows the virtual data center that hosts your data.
|Retention||This data shows how long the logs are stored in the Armor user interface.|
|Average Size||This data shows the average log size.|
This data shows the status of your Armor Agent.
Online - This status means the Armor Agent is active and has sent logs within the last hour.
Warning - This status means the previous 24-hour log volume has exceeded the 7-day moving average by 10% or more.
Critical - This status means the Armor Agent has not sent logs within the last hour.
Offline - This status means that the Armor Agent, and possibly the virtual machine, is offline.