The DLP Server stores both incident logs and forensic data in a local file system. Over time, the logs and data could occupy too much hardware space. To reduce the impact on server performance, DLP provides CLI commands for backing up, cleaning, and restoring incident logs and recorded data. You must be logged on as root.

By default, DLP stores incident logs on the local file system in the backup folder, /backup/violationlogs. Incident logs are scheduled for a purge daily by default. During the log purge, DLP purges incident logs from the database if they are older than 90 days.