KB Article | Forcepoint Support

Problem Description

The size of the Forcepoint Log Database has grown too large and there is a need to delete or disable partitions to free up space.


Forcepoint WEB and EMAIL

In order to resolve the issue for Web and Email products, follow the steps below.
  1. Log on to the Forcepoint Security Manager (formerly Triton).
  2. Click Settings > Reporting > Log Database.
  3. Scroll down to the particular partitions you want to Delete or Disable.
  4. Select which partitions you wish to disable/delete by marking the checkbox to the left of each.
  5. Press disable/delete as per the picture below in red.
User-added image

For more information on these options, refer to the following documentation:
Configuring database reporting options

Forcepoint DLP

In order to resolve the issue for Forcepoint DLP, refer to the following documentation:
Archiving DLP Partitions

Please note that archive partitions only cover DLP incidents, whereas Discovery incidents are kept in a separate set of tables that are prone to growing the most in size in comparison. In order to clear these incidents up, consider deleting Discovery incidents through the UI report.

Keywords: log database; delete partition; disable partition; log database space issue; logs not sending; no logging occurring; log cache full; logs stopped; log database not creating partition; log database excess size

Article Feedback

Thank you for the feedback and comments.