Purging the Audit Log
You can delete and archive specified records from the Integrity Lifecycle Manager server audit log using the im command. You can delete or archive records older than a specified date, thereby controlling the size of the audit log table in the database.
|
|
The si purgeauditlog command also allows you delete or archive records from the audit log. For more information, see the CLI man pages.
|
For example, the following command purges all audit log records prior to 10:00 AM on January 20, 2010 and creates a CSV file archive of the records in the default directory:
im purgeauditlog --before="01/20/2010 10:00:00 AM"
The following command purges all audit records prior to 10:00 AM on January 20, 2010 without creating a CSV file archive:
im purgeauditlog --before="01/20/2010 10:00:00 AM" --noBackup
If the property mksis.auditor.is=true, each purging or archiving operation is also recorded in the audit log. The purged records are automatically archived in a backup directory on the Integrity Lifecycle Manager server. The archive file is a comma-separated values (CSV) file where each field is separated by a comma.
For more information on the options available with the im purgeauditlog command, see the CLI man pages.
