Hi,
It depends on how fast the SDL log files are being filled. CUCM keeps 256
files and overwrite them once the last file is filled. If you aren't able
to get more than 1 hr worth of the logs, then your files are filled fast.
This depends on the logging level configured in your cluster, the type of
logs enabled, etc.
Either tweak your logging settings from serviceability console or send the
logs to remote logging server.
***** please remember to rate useful posts
