问题

审计日志-删除/日志轮换

  • 2019年12月11日
  • 1回复
  • 1575的浏览量
J

你好,社区,
我参与了一个预售活动。客户要求从审计日志中删除用户数据。
是否可以从审计日志中删除用户信息?
或者审计日志会自动删除超过XX个月的条目吗?事件存储在审计日志中的时间有多长?也许这是基于一个参数?

谢谢你的任何反馈!

Jan-Oliver Ohloff

Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?<\/p>

Thanks for any feedback!<\/p>

Jan-Oliver Ohloff<\/p>","quoteUsername":"Jan-Oliver","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

1回复

米
排名
Userlevel 3
徽章 ＋４

你好,社区,
我参与了一个预售活动。客户要求从审计日志中删除用户数据。
是否可以从审计日志中删除用户信息?
或者审计日志会自动删除超过XX个月的条目吗?事件存储在审计日志中的时间有多长?也许这是基于一个参数?

谢谢你的任何反馈!

Jan-Oliver Ohloff

嗨 @Jan-Oliver

只有具有Nutanix CVM ssh访问权限的用户才能删除文件。

Prism元素审计是在它的相关日志文件中完成的，以及在CVM / Cluster中活动的所有其他组件。(i)信息(ii)警告(iii)错误(iv)致命事故将记录在home/nutanix/data/logs下。

棱镜组件和棱镜中央警报和事件日志保留90天。

在这种情况下，当用户希望审计日志等时，他们应该将日志从集群发送到一个集中的syslog主机。

配置SysLog横穿(没有棱镜中心)

配置以棱镜为中心的syslog

希望这有助于

BR

Hello Community,
I'm involved in a PreSales action. The customer asks for information regarding deletion of user data from Audit Logs.
Is it possible to delete user information from audit logs?
Or does the audit log automatically delete entries older than XX months? How long are events stored in audit log? Maybe this is based on a parameter?<\/p>

Thanks for any feedback!<\/p>

Jan-Oliver Ohloff<\/p> <\/content-quote>

\u00a0<\/p>

Hi @Jan-Oliver<\/user-mention>\u00a0<\/p>

Only a user with Nutanix CVM ssh access can delete files.<\/p>

Prism Element auditing is done in its relevant log files, alongwith all other components which are active on a CVM \/ Cluster.\u00a0Respective component level (i) Information (ii) Warning (iii) Errors (iv) Fatals will be recorded under home\/nutanix\/data\/logs.<\/p>

Prism Element and Prism Central Alert and Event log is retained for 90 Days.<\/p>

In this case, where a user wants to audit logs etc, they should ship logs from the cluster to a centralised syslog host.\u00a0<\/p>

Configuring SysLog AOS<\/a>\u00a0(without prism central)<\/p>

Configuring syslog with prism central<\/a><\/p>

Hope this helps<\/p>

BR<\/p>","quoteUsername":"Mutahir","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

回复


Baidu