Announcements

SecurID® Discussions

Browse the SecurID discussion board to get product help and collaborate with other SecurID users.
JackAlexander
Beginner
Beginner

Removing old logs from AM

Is there a way to remove old logs or any old unneeded data from AM as all my servers seem to be growing and growing?

 

I have changed the archive audit logs down to 30 days for online and offline for all logs and its set to purge and export but in VMware all the servers are growing daily.

Labels (1)
0 Likes
4 Replies
JoshWelsh
Beginner
Beginner

I have the same issue and it has carried over from 8.1 to 8.2.  Only manual archives seem to work. I currently have a case open but before they escalate to engineering they are asking to patch to 8.2 SP1 Patch 5.  I'm hoping there's a simpler answer.

0 Likes
JackAlexander
Beginner
Beginner

O right, so you think the schedule isn't working? Only choosing Archive now works?  I have changed this and the number of days in the system log from the ops console but servers are still increasing in size daily

0 Likes
JoshWelsh
Beginner
Beginner

Right.  Archive Now works just fine, but scheduled archiving doesn't appear to do anything.  There's also no evidence in the system logs that the scheduled archive is being triggered.

0 Likes
PiersB
Trusted Contributor Trusted Contributor
Trusted Contributor

You should contact Customer Support if you are not able to get scheduled backups working. Just to be clear, there are four different functions. "Archive Now" and "Schedule Log Archival" (from the Security Console) work specifically with the audit logs. "Back Up Now" and "Schedule Backups" (from the Operations Console) perform complete database backups. 

 

Many customers create a remote file share (Windows or NFS) and create scheduled job to perform the backup. You can configure the backup job to securely write the encrypted backup on the remote file share and avoid filling the local storage on your appliance. All other server logging has configured limits and attains a "steady state". It should never exhaust the storage on your appliance.I assume you have pre-allocated the VMware storage as recommended; there are a number of performance and reliability issues associated with dynamically allocated storage in VMware.

 

You may also want to configure the "Low Disk Space Events"  notification mechanism. This is configured in Setup > System Settings > Critical System Event Notification and can generate an email notification if your server is getting low on available space.