The first time the archive process runs the number of days archived is dependent on the plan:
The maximum number of days that data is archived includes logs for the past 30 days when the instance has a 30 day search plan.
The maximum number of days that data is archived includes logs for the past 14 days when the instance has a 14 day search plan.
The maximum number of days that data is archived includes logs for the past 7 days when the instance has a 7 day search plan.
For example, you have a service plan of 30 days. You configured the instance 10 days ago. You enable archiving on the 10th day. The archiving process generates multiple files.
This is no longer correct. Archiving does not include older files anymore. Archiving will start from when it's turned on and will not include historical files (only for the last hour).
https://cloud.ibm.com/docs/log-analysis?topic=log-analysis-archiving-ov#:~:text=The%20first%20time,period%20is%20empty.
This is no longer correct. Archiving does not include older files anymore. Archiving will start from when it's turned on and will not include historical files (only for the last hour).