Log retention for 1 year

[dimitrios.katsaros]

eetings,

Could the community inform me about the following scenario please.

I have 2960 series switches and i would like to do log retention for at least 1 year locally to the switch.

How could i achieve that (without affecting switch performance)  either by using "logging buffered size" or/and "logging file flash:/filename max-size min-size logtype"

Which values would be the optimum for me to define for the above commands?

Please advice.

[balaji.bandi]

it is all depends how many logs it produces, and it overwrite once buffer overflow.

best way as per givernance looking to retain Logs for 1 years, offload to syslog server out of the box.

you can keep them as long as you want to meet the Audit or Governance rquirement.

[dimitrios.katsaros]

Classification: Saudi Aramco: Company General Use

Thank you for your reply. However, those switches are completely standalone i.e not connected to our existing network. That's why I would like to save logs locally to the switch in order to meet the audit compliance requirements.
How could I achieve that by modifying the logging buffer size and by using the logging file command?

[balaji.bandi]

Those switches can not hold the information as looking for Long 1 years and for now we are not sure how many Logs it generating.

1.it wont be possible, depends on Logs generated.

2. Once switch reboots all the Logs go away.

by the situation you mentioned other option i can thnk USB Thumb drive connet and redirect the logs to ?USBflahs

[Leo Laohoo]

Get a cheap Raspberry Pi, attach it to the same switch and get the switch to send logs to the Raspberry Pi.