Roaming profile being filled up with ICT logs

Products

• Information Centric Security

Issue/Introduction

If your user's Roaming profile is being filled up with log files, you can change the log files location or limit the amount of days to retain non-functional logging information.

By default, ICT log files are being stored in the roaming profile (%userprofile%/appdata/roaming/Symantec Corporation/Information Centric Tagging) and recycled every week.

Resolution

To change the logs location and amount of time:

1. Click the windows key and the R at the same time - this will launch the run window
2. type regedit - you need to be local Admin to proceed with this changes
3. Go to HKEY_CURRENT_USER\SOFTWARE\Watchful Software\RightsWATCH
4. Right click an empty space in the right pane, select New and then String value
5. Name it "LogLocation"
6. Right click "LogLocation" and click Modify
7. Enter the path to the new location for the logs in the Value data field
8. Right click an empty space in the right pane, select New and then DWROD (32bit) value
9. Name it "DaysOfLogToKeep"
10. Right click "DaysOfLogToKeep" and click Modify
11. Change the Base to decimal and enter the amount of days to keep logs in the Value data field
    1. Setting the "DaysOfLogToKeep" to 0 will make ICT to stop storing logs
12. Repeat the steps 4 to 11 on HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Watchful Software\RightsWATCH for 32bit applications using ICT

 

Perform steps 4 to 7 or 8 to 11 according to what you need to change (location or amount of days to log respectively)