Endpoint Administration Guide for Windows › Monitoring and Auditing › The Audit Log › Audit Log Backup › Set the Size at which the Audit Log will be Backed Up Automatically

Set the Size at which the Audit Log will be Backed Up Automatically

You can set a limit on the size of the audit log file. When the file reaches the defined size, CA ControlMinder automatically creates a backup copy of the file and clears the log. This means that the file is automatically backed up regularly.

To set the size at which the audit log will be backed up automatically, set the maximum size you require, in KB, in the logmgr\audit_size CA ControlMinder registry entry.

Note: You can define the name of the backup file by setting the logmgr\audit_back CA ControlMinder registry entry.

Important! If the logmgr/BackUp_Date CA ControlMinder registry entry is set to yes (no is the default), each size-triggered backup copy of the audit log is suffixed with a timestamp. In all other cases, including when date-triggered backups are configured, each backup copy overwrites the previously written backup copy.

Example: Set automatic backup of audit log file when it reaches 5 MB

This example shows you how you set your audit log file to be backed up when it reaches 5 MB (5120 KB). To do this, set the logmgr\audit_size CA ControlMinder registry entry to 5120.

When the audit log file reaches 5 MB, CA ControlMinder will create a backup copy of the file, named seos.audit.bak by default, and clear the log.

Example: Set automatic backup of audit log file when it reaches 1 MB with a custom name and a timestamp

This example shows you how you set your audit log file to be backed up when it reaches 1 MB (1024 KB), using a custom name for the backup file and adding a timestamp to the name.

To do this, set the following CA ControlMinder registry entries as shown:

• logmgr\audit_size=1024
• logmgr\audit_back=log\ac_audit.old
• logmgr\BackUp_Date=yes

When the audit log file reaches 1 MB, CA ControlMinder will create a backup copy of the file, and clear the log. The name of the backup log file name will be: ac_audit.old.timestamp, where timestamp is the date and time in the format DD-Mon-YYYY.hhmmss. For example:

ac_audit.old.06-Feb-2007.144330