Question

Audit Log - Deletion / log rotation

  • 11 December 2019
  • 1 reply
  • 2319 views
J

Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?

Thanks for any feedback!

Jan-Oliver Ohloff

This topic has been closed for comments

1 reply

M
Rank
Userlevel 3
Badge +4

Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?

Thanks for any feedback!

Jan-Oliver Ohloff

 

Hi @Jan-Oliver 

Only a user with Nutanix CVM ssh access can delete files.

Prism Element auditing is done in its relevant log files, alongwith all other components which are active on a CVM / Cluster. Respective component level (i) Information (ii) Warning (iii) Errors (iv) Fatals will be recorded under home/nutanix/data/logs.

Prism Element and Prism Central Alert and Event log is retained for 90 Days.

In this case, where a user wants to audit logs etc, they should ship logs from the cluster to a centralised syslog host. 

Configuring SysLog AOS (without prism central)

Configuring syslog with prism central

Hope this helps

BR

Terms & Conditions