Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?
Thanks for any feedback!
Jan-Oliver Ohloff
Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?
Thanks for any feedback!
Jan-Oliver Ohloff
Hi
Only a user with Nutanix CVM ssh access can delete files.
Prism Element auditing is done in its relevant log files, alongwith all other components which are active on a CVM / Cluster. Respective component level (i) Information (ii) Warning (iii) Errors (iv) Fatals will be recorded under home/nutanix/data/logs.
Prism Element and Prism Central Alert and Event log is retained for 90 Days.
In this case, where a user wants to audit logs etc, they should ship logs from the cluster to a centralised syslog host.
Configuring SysLog AOS (without prism central)
Configuring syslog with prism central
Hope this helps
BR
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
