There are two Zerto components that write standard-level log files for cases in which a past condition or issue requires our investigation. Each component writes logs relevant to its own role and responsibilities, in their own repository.

The Zerto Virtual Manager (ZVM) retains standard-level log files according to the value set in the logging configuration file. By default, a maximum of 150 log files with a size of 10 MB each is retained which equals approx. 72 hours of logging information.

Once 150 standard-level log files have been created, the ZVM begins to remove the oldest log file as each new log file is created.

The Virtual Replication Appliance (VRA) retains a maximum of 1000 standard level log files by default on the VRA VM, each file is a maximum of 1 MB which also equals approx. 72 hours of logging information.

The more logs retained, the further back in time Zerto can analyze.

The time frame covered within the ZVM logs varies, depending on the rate the information is written to the log file by the ZVM. A busy environment with more than one paired site, and more than 100 VPGs, will retain a much shorter time frame of logging information, compared to a less busy environment with one paired site and less than 25 VPGs. Therefore, the information contained in the logs of a busy environment can be lost once the log files are filled with logging information too quickly.

As opposed to the ZVM component of which there is only one instance that manages the replication of an entire environment, there are multiple VRAs in most environments upon which the loads of replication can be spread. Therefore, the likelihood of losing logging data on VRAs in general is lower.

However, in very large environments where VRAs are more likely to be under high workloads, an administrator may wish to increase the logging retention of the VRAs to accommodate more logging information.

The ZVM log files are saved to the Logs directory at the Zerto Virtual Replication installation directory.

Open the oldest log file within this directory and note down the time stamp written in the first log line entry within this file. This log line will determine the oldest point in time covered by the logs.

Since the rate of information generated by the Zerto Virtual Manager will fluctuate, observing the time frame covered at multiple points during a day or week will provide a more accurate estimate of the time frame covered by the logs. The same is true for this process in the VRAs, however one would need to submit a support ticket with Zerto and schedule a WebEx with one of our Support Engineers to review the VRA log files status.