Audit retention period and catalog backups of audit records
The audit records are kept as part of the NetBackup database, for as long as the retention period indicates. The records are backed up as part of the NetBackup catalog backup. The NetBackup Audit Service (nbaudit) deletes expired audit records once every 24 hours at 12:00 A.M. (local time).
By default, audit records are kept for 90 days. Use an audit retention period value of 0 (zero) if you do not want to delete the audit records.
To configure the audit retention period
- Log on to the primary server.
- Open the following directory:
Windows: install_path\NetBackup\bin\admincmd
UNIX: /usr/openv/netbackup/bin/admincmd
- Enter the following command:
nbemmcmd -changesetting -AUDIT_RETENTION_PERIOD number_of_days -machinename primaryserver
Where number_of_days indicates (in days) how long audit records are to be retained for the audit report.
In the following example, the records of user actions are retained for 30 days and then deleted.
nbemmcmd -changesetting -AUDIT_RETENTION_PERIOD 30 -machinename server1
To ensure that audit records are not missed from a catalog backup, configure the catalog backup frequency to be less frequent or equal to the -AUDIT_RETENTION_PERIOD.