search cancel

Roaming profile being filled up with ICT logs


Article ID: 172941


Updated On:


Information Centric Security


If your user's Roaming profile is being filled up with log files, you can change the log files location or limit the amount of days to retain non-functional logging information.

By default, ICT log files are being stored in the roaming profile (%userprofile%/appdata/roaming/Symantec Corporation/Information Centric Tagging) and recycled every week.


To change the logs location and amount of time:

  1. Click the windows key and the R at the same time - this will launch the run window
  2. type regedit - you need to be local Admin to proceed with this changes
  3. Go to HKEY_CURRENT_USER\SOFTWARE\Watchful Software\RightsWATCH
  4. Right click an empty space in the right pane, select New and then String value
  5. Name it "LogLocation"
  6. Right click "LogLocation" and click Modify
  7. Enter the path to the new location for the logs in the Value data field
  8. Right click an empty space in the right pane, select New and then DWROD (32bit) value
  9. Name it "DaysOfLogToKeep"
  10. Right click "DaysOfLogToKeep" and click Modify
  11. Change the Base to decimal and enter the amount of days to keep logs in the Value data field
    1. Setting the "DaysOfLogToKeep" to 0 will make ICT to stop storing logs
  12. Repeat the steps 4 to 11 on HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Watchful Software\RightsWATCH for 32bit applications using ICT


Perform steps 4 to 7 or 8 to 11 according to what you need to change (location or amount of days to log respectively)