Audit Log Retention Period
Set up how many days of audit logs will be kept in the LogServer database. You should avoid setting this to more than 183 days (6 months) in order to avoid running out of shards. Make sure you have specified an adequate disk size based on the rate of log generation and the retention period chosen.
NOTE
The LogServer needs to have admin access (port 8443) to the Controllers.