Log history

reference brazil Updated Sep 10, 2026 1 min read r_LogHistory.md

The system uses table rotation and table extension to archive older logs.

By default, the system uses the following schedule to archive common logs:

Table	Archive schedule	Rotations	Type
Event [ecc_event]	Every day	7	Rotation
Queue [ecc_queue]	Every day	7	Rotation
Event [sysevent]	Every day	7	Rotation
Log [syslog]	Every week	8	Rotation
Transaction Log [syslog_transaction]	Every week	8	Rotation

Note: The Email [sys_email] table is not managed using table rotation or extension. Instead, use the Email retention plugin to archive and destroy email records. By default, email records are archived after one year and destroyed after an additional year in the archive.

29 lines · 1.2 KB Wrap lines

---
title: Log history
description: The system uses table rotation and table extension to archive older logs.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/platform-security/r\_LogHistory.html
release: brazil
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [System logs, Logs, Platform Security]
---

# Log history

The system uses table rotation and table extension to archive older logs.

By default, the system uses the following schedule to archive common logs:

|Table|Archive schedule|Rotations|Type|
|-----|----------------|---------|----|
|Event \[ecc\_event\]|Every day|7|Rotation|
|Queue \[ecc\_queue\]|Every day|7|Rotation|
|Event \[sysevent\]|Every day|7|Rotation|
|Log \[syslog\]|Every week|8|Rotation|
|Transaction Log \[syslog\_transaction\]|Every week|8|Rotation|

**Note:** The Email \[sys\_email\] table is not managed using table rotation or extension. Instead, use the [Email retention](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-administration/email-retention.md) plugin to archive and destroy email records. By default, email records are archived after one year and destroyed after an additional year in the archive.