true node1 9000 node2 9000 node3 9000 system query_log toYYYYMM(event_date) event_date + INTERVAL 30 DAY DELETE 100 8192 524288 false