The default configuration does not encrypt or roll over the audit databases. If your security model requires you to keep audit records available for years, you need to configure the rollover options and move the rolled-over files to an archive location.
To set the Audit configuration:
Click Reports > Settings > Audit Settings on the home page of the Privileged Access Manager console.
Specify the details for each audit database file, set the rollover parameters. Rolled-over databases are kept as SQLite databases.
|
|
|---|---|
|
Audit DB Name |
This column lists the configured audit database names. Except for Change Management chngmgnt database name which is present by default, all other database names are populated only when you configure them. |
|
Rollover Time (hours) |
If Rollover Time is reached before Rollover Size, the time interval is used for rollover. |
|
Rollover Size (MB) |
If Rollover Size is reached before Rollover Time, the size restriction is used for rollover. |
|
Protection |
Select None to set the rollover file as an unencrypted file or select Encrypted to encrypt the audit database. When you select Encrypted to encrypt any database, ensure that the NULL Cipher (clear text) key is disabled at Reports > Settings > Encryption Settings. NOTE:Encrypting the file can impact the performance of your audit managers. Also, the encrypted file can be decrypted by the Privileged Access Manager, but it cannot be displayed on new systems that do not detect the encryption keys. To configure the encryption keys, click Reports > Settings > Encryption settings. |
Click Finish.