We recently purchased this software and are presently configuring same.

We have hundreds of thousands of successful logins (and logoffs) which we want to receive but don't want to preserve for 90 days (which is what we have the 'db retention period' set at).

I understand I can filter (either at origin at Windows auditing level or in the Eventlog Analyzer 'Log Collection Filter' ) to completely eliminate the registration of these events but can't find an option to delete these events after a period of time (for example want to keep all successful logins for 5 days whilst keeping the rest for 90 days).

Is that possible?

Thank you

Miguel