What do you mean by blue?
If they are full, you will need to go to the cli and see why they are full.
You can reduce the retention to help relieve some pressure.
Policies can affect how much you are collecting.
The video below may help with all of these areas.
https://www.securitylearningacademy.com/enrol/index.php?id=839Let us know if this helps. If not, we can see what else might help.
------------------------------
Jennifer Dodson
Senior Security Technical Specialist
US National Market Southwest
1 469 990 5954 Mobile
jennifer.dodson@ibm.comIBM
------------------------------