From 599e8dda1d192eb61cefb17b8f94c172c23fd6cb Mon Sep 17 00:00:00 2001
From: Nawaz Dhandala <hello@nawazdhandala.com>
Date: Mon, 30 Mar 2026 21:27:40 +0100
Subject: [PATCH] feat: add system log retention configuration for ClickHouse
 with TTL settings

---
 HelmChart/Public/oneuptime/values.yaml | 47 ++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)

diff --git a/HelmChart/Public/oneuptime/values.yaml b/HelmChart/Public/oneuptime/values.yaml
index 8f9f6404ef..5846d99aa2 100644
--- a/HelmChart/Public/oneuptime/values.yaml
+++ b/HelmChart/Public/oneuptime/values.yaml
@@ -188,6 +188,53 @@ clickhouse:
         <postgresql_port>9005</postgresql_port>
         <interserver_http_port>9009</interserver_http_port>
         <listen_host>::</listen_host>
+
+        <!-- System log retention: 6 hour TTL to prevent unbounded disk growth -->
+        <query_log>
+            <database>system</database>
+            <table>query_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </query_log>
+        <trace_log>
+            <database>system</database>
+            <table>trace_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </trace_log>
+        <text_log>
+            <database>system</database>
+            <table>text_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </text_log>
+        <part_log>
+            <database>system</database>
+            <table>part_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </part_log>
+        <metric_log>
+            <database>system</database>
+            <table>metric_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </metric_log>
+        <asynchronous_metric_log>
+            <database>system</database>
+            <table>asynchronous_metric_log</table>
+            <partition_by>toYYYYMM(event_date)</partition_by>
+            <ttl>event_date + INTERVAL 6 HOUR DELETE</ttl>
+            <flush_interval_milliseconds>7500</flush_interval_milliseconds>
+        </asynchronous_metric_log>
+        <!-- Disable processors_profile_log entirely — it was 536 GiB and is not needed -->
+        <processors_profile_log remove="1" />
+
         <users>
             <${CLICKHOUSE_USER}>
                 <password>${CLICKHOUSE_PASSWORD}</password>