Retaining and backing up audit trail records

By default, audit records are kept for 90 days. To change the default, use the nbemmcmd -changesetting command with the -AUDIT_RETENTION_PERIOD option.

See Configuring auditing on a NetBackup master server.

Based on the configured retention setting, the NetBackup Audit Service (nbaudit) deletes expired audit records once every 24 hours at 12:00 A.M. (local time).

The audit records are kept in audit tables that are part of the NetBackup database. The tables are retained for as long as the -AUDIT_RETENTION_PERIOD indicates and are backed up as part of the NetBackup catalog backup.

To make sure that audit records are not missed from a catalog backup, configure the catalog backup frequency to be less frequent or equal to the -AUDIT_RETENTION_PERIOD.

NetBackup OpsCenter downloads the audit records periodically from the EMM database. OpsCenter retains the records for a period of time that is configured within OpsCenter. Therefore, retaining the audit records on the NetBackup master server is only necessary if you want to view audit reports using the command line on the master server. Audit records can also be exported from OpsCenter.