PowerScale OneFS 9.2.1.0 CLI Administration Guide

Audit log purging

You can delete the audit logs.

In OneFS , the audit system writes audit logs in the /ifs/.ifsvar/audit/logs directory. After the audit log file reaches 1G, a new file is created, and the old file is compressed. As time goes on, the audit log file exhausts all space on the file system.

The audit log purging feature is now supported on the cluster. There are two ways to delete the audit log. In the first method, automatic deletion, the audit log gets deleted on its own after passing the retention period.

The retention period works like a window, any audit log out of the window is deleted. For example, if you configure the retention period as 90 days, and the current date is 2019-5-30. Then, any log before 2019-3-1 will be deleted, since from 2019-3-1 to 2019-5-30 is a 90 days window.

The second method is manual deletion, and here you can manually delete the audit log before a specified period.

Both automatic deletion and manual deletion apply to configuration audit and protocol audit logs simultaneously.