Technical Tip: Use the CLI to bulk delete EventDB events from the database to free up space

To manually delete the outdated data from the event database, remove all files that are older than X days.

Before deleting anything, use this command to check what will be deleted:

find /data/eventdb/ -type f -mtime +150 -name '*' -exec ls -lh {} \;

find /data/eventdb/ -type f -mtime +<number of days> -name '*' -exec rm -rfv {} \;

For example, to remove all the data and events older than 150 days, run the following:

find /data/eventdb/ -type f -mtime +150 -name '*' -exec rm -rfv {} \;

Note: 

This example illustrates the removal of data that is 150 days old. This number can be adjusted based on specific requirements.

1. Take a backup of the virtual machine (VM).

2. Ensure also to back up all necessary data.

3. Note that once the data is erased, it cannot be recovered.

For more information related to space purging, see the 'Retention Policies' documentation:

Creating Retention Policy