Repository cleanup job completes successfully but repository still contains old events (4254927)

Repository cleanup job is created and configured to Clear data, older than a certain time period or before a certain date, and the job completes successfully but the repository still contains events older than what was specified.

The InTrust Repository contains events older than the specified in the Cleanup job due to the compressed file method that InTrust uses to store events. Repository cleanup jobs delete whole files from the repository; if a repository file spans a date/time boundary, the file is not deleted.

For example, if a Repository cleanup job is configured to remove events older than 6 months, if one of the compressed files for Repository contains even one event that is less than 6 months old the file will not be deleted and the events that are more than 6 months old will continue to be visible.