Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Trend Micro Apex One™ On-Premise Agent and Server log volume control for log maintenance

    • Updated:
    • 7 Jan 2022
    • Product/Version:
    • Apex One
    • Apex One
    • Apex One
    • Platform:
Summary

This article discusses how to automate log volume control using ofcscan.ini after Apex One Patch 6.

Details
Public

This feature can benefit administrator to control their DB/Disk size to prevent resource exhaustion by server logs.

By default this feature is enabled on Apex One on-premises which sets the following values for each log type configuration with hidden keys in ofcscan.ini.

Scheduled_Delete_Spyware_Retain_Count=1000000
Scheduled_Delete_Virus_Retain_Count=1000000
Scheduled_Delete_PFW_Retain_Count=1000000
Scheduled_Delete_URLFiltering_Retain_Count=1000000
Scheduled_Delete_AEGISBM_Retain_Count=1000000
Scheduled_Delete_AEGISDAC_Retain_Count=1000000
Scheduled_Delete_CCCA_Retain_Count=1000000
Scheduled_Delete_NCIE_Retain_Count=1000000
Scheduled_Delete_DLPCLC_Retain_Count=500000
Scheduled_Delete_Trendx_Retain_Count=1000000
Scheduled_Delete_Ransomware_Retain_Count=1000000
Scheduled_Delete_ScanOP_Retain_Count=1000000
Scheduled_Delete_Special_Retain_Count=1000000
Scheduled_Delete_Restore_Retain_Count=1000000
Scheduled_Delete_FA_Restore_Retain_Count=1000000

To configure/disable this feature:

  1. Go to C:\Program Files (x86)\Trend Micro\Apex One\PCCSRV and locate the ofcscan.ini file. Create a backup copy before editing the file.
  2. Open the file and look for [INI_SCHEDULED_DELETE_LOG_SECTION]. Add the following entries:

    Scheduled_Delete_Spyware_Retain_Count=<Log count>
    Scheduled_Delete_Virus_Retain_Count=<Log count>
    Scheduled_Delete_PFW_Retain_Count=<Log count>
    Scheduled_Delete_URLFiltering_Retain_Count=<Log count>
    Scheduled_Delete_AEGISBM_Retain_Count=<Log count>
    Scheduled_Delete_AEGISDAC_Retain_Count=<Log count>
    Scheduled_Delete_CCCA_Retain_Count=<Log count>
    Scheduled_Delete_NCIE_Retain_Count=<Log count>
    Scheduled_Delete_DLPCLC_Retain_Count=<Log count>
    Scheduled_Delete_Trendx_Retain_Count=<Log count>
    Scheduled_Delete_Ransomware_Retain_Count=<Log count>
    Scheduled_Delete_ScanOP_Retain_Count=<Log count>
    Scheduled_Delete_Special_Retain_Count=<Log count>
    Scheduled_Delete_Restore_Retain_Count=<Log count>
    Scheduled_Delete_FA_Restore_Retain_Count=<Log count>
    
     
    You can set the log count to "0" to disable this feature.
     
  3. Save the changes.
  4. Restart Apex One Server master service.
  5. Open the Registry Editor (regedit.exe).
  6. Go to HKLM\\SOFTWARE\\TrendMicro\\OfficeScan\\service\\Scheduled_Delete_Log and check following keys are updated:

    Spyware_Retain_Count
    Virus_Retain_Count
    PFW_Retain_Count
    URLFiltering_Retain_Count
    AEGISBM_Retain_Count
    AEGISDAC_Retain_Count
    CCCA_Retain_Count
    NCIE_Retain_Count
    DLPCLC_Retain_Count
    Trendx_Retain_Count
    Ransomware_Retain_Count
    ScanOP_Retain_Count
    Special_Retain_Count
    Restore_Retain_Count
    FA_Restore_Retain_Count
    

For support assistance, please contact Trend Micro Technical Support.

Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000289918
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.