Limiting the Age (and Size) of Audit Logs

If you want to retain all of the audit log data but work with smaller data sets when loading and analyzing the log, you can configure Anzo to add an age limit (in days) to audit log data sets. Once an audit log data set reaches that age, Anzo stops writing to it and a new audit log data set is started. Follow the instructions below to configure the audit log service to add an age limit.

1. In the Administration application, expand the Servers menu and click Advanced Configuration. Click I understand and accept the risk.
2. Search for the Anzo Audit Logging Framework bundle and view its details.
3. Click the Services tab and expand com.cambridgesemantics.anzo.AuditLog.
4. Find the limitAge and maxAge properties (shown below).

   

5. Select the com.cambridgesemantics.anzo.auditlog.limitAge checkbox to enable the age limit feature.
6. Edit the com.cambridgesemantics.anzo.auditlog.maxAge property to specify the maximum number of days to log in each data set. When the current audit log reaches that age, Anzo starts writing to a new data set.
7. Restart Anzo to apply the configuration changes.

Related Topics

• System Query Audit
• Enabling and Viewing Audit Logs