Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Archiving and Purging or Only Purging Audit Logs

The Archive/Purge Logs page enables you to purge audit logs without archiving them or to purge audit logs after archiving them. You can purge audit logs before a specified date and time or audit logs that are older than a specified number of days. Audit logs can be archived locally (on any node that is in the UP state) or to a remote server.

Note:

If more than one Archive/Purge job is scheduled at the same time, then the job that is executed first goes through and the other jobs fail. Scheduled jobs can be rescheduled from the Job Management page.

This topic includes the following sections:

Purging Audit Logs Without Archiving

To purge audit logs without archiving them:

  1. On the Junos Space Network Management Platform UI, select Audit Logs > Audit Log > Archive/Purge Logs.

    You are taken to the Archive/Purge Logs page.

  2. Using the Purge Logs field, specify a date and time before which audit logs should be purged or that audit logs that are older than a specified number of days should be purged:
    • To purge audit logs before a specified date and time:

      1. Select Before, which is the default.

      2. Enter a date in the text box (in DD/MM/YYYY format) or click the calendar icon and select a date; for example, 20/11/2014.

      3. Enter a time in the text box (in HH:MM AM/PM format) or click the down arrow icon and select a time; for example: 1:15 AM.

        Note:

        You specify the time in the local time zone of the client computer but the audit logs are purged according to the time zone configured on the Junos Space Platform server.

    • To purge audit logs older than a specified number of days:

      1. Select Older than.

      2. Specify the number of days (the default is 90 days) such that the audit logs older than the specified number of days will be purged

  3. To purge audit logs from all domains to which you have access, select the Purge audit logs from all accessible domains check box.
    Note:

    By default, audit logs are purged only from domain that you accessed, so the Purge audit logs from all accessible domains check box is cleared.

  4. Clear the Archive Logs Before Purge check box, which is selected by default.
    CAUTION:

    If you choose not to archive the audit logs before purging, the audit logs are deleted from the Junos Space Platform database and cannot be recovered.

  5. (Optional) To schedule the purge operation for later, select the Schedule at a later time check box and specify a start date and time for the purge.
    Note:

    You specify the time in the local time zone of the client computer but the purge is scheduled according to the time zone configured on the Junos Space Platform server.

  6. (Optional) To specify whether the purge should be done on a recurring basis, select the Recurrence check box.
    Note:

    This option is enabled only if you choose to purge audit logs older than a specified number of days.

    A number of fields allowing you to specify when the purge should recur are displayed. The fields are explained in Table 1.

    Table 1: Fields for Specifying Recurring Purges

    Field Name

    Description

    Repeats

    Specify the periodicity of the recurrence:

    • Minutes

    • Hourly

    • Daily

    • Weekly

    • Monthly

    • Yearly

    Repeat every

    Specify the period at which the purge should recur. For example, if you specified a periodicity in hours (Hourly), enter the number of hours after which the purge should recur.

    Repeat by

    Specify one or more days on which you want the purge to recur.

    Note:
    • This field is displayed only when you specify a weekly periodicity (Weekly).

    • The day on which the purge is scheduled is disabled. For example, if you scheduled a job on a Wednesday, then Wed is selected by default and disabled. You can select other days by enabling the corresponding check boxes.

    Ends

    Specify one of the following:

    • Select Never to continue (without an end date) the recurring purge operation at the specified recurrence interval.

    • Select On and specify a date and time on which to stop the recurring purge operation.

  7. Click Submit.

    Junos Space Platform checks whether a job of this type already exists for that domain:

    • If a job already exists, then a message is displayed indicating that conflicting jobs exist, and the existing conflicting jobs are displayed in a table.

      1. Click Yes to create a new job.

        The Audit Log Archive/Purge confirmation dialog box is displayed with the audit log archive filename and location and a warning indicating that the audit logs will be purged from the database.

      2. Click No to return to the previous page.

        You are taken to the previous page.

    • If no job exists, then the Audit Log Archive/Purge confirmation dialog box is displayed with the audit log archive filename and location and a warning indicating that the audit logs will be purged from the database.

  8. In the Audit Log Archive/Purge dialog box, click Continue to archive and purge the logs.

    The Job Information dialog box is displayed with the job ID. Click the Job ID to view the details; otherwise, click OK to close the dialog box.

Purging Audit Logs After Archiving

To purge audit logs after archiving them:

  1. On the Junos Space Network Management Platform UI, select Audit Logs > Audit Log > Archive/Purge Logs.

    You are taken to the Archive/Purge Logs page.

  2. Using the Purge Logs field, specify a date and time before which audit logs should be archived and purged or that audit logs that are older than a specified number of days should be archived and purged:
    • To archive and purge audit logs before a specified date and time:

      1. Select Before, which is the default.

      2. Enter a date in the text box (in DD/MM/YYYY format) or click the calendar icon and select a date; for example, 20/11/2014.

      3. Enter a time in the text box (in HH:MM AM/PM format) or click the down arrow icon and select a time; for example: 1:15 AM.

        Note:

        You specify the time in the local time zone of the client computer but the audit logs are archived and purged according to the time zone configured on the Junos Space Platform server.

      Note:

      In this case, the format of the audit log filename is JunosSpaceAuditLog_purge-date-and-time_date-and-time-in-ms.csv.gz, where purge-date-and-time is the specified purge date (in yyyy-mm-dd format) and time (in hh-mm-ss format), and date-and-time-in-ms is the date and time in milliseconds at which the job was created.

    • To archive and purge audit logs older than a specified number of days:

      1. Select Older than.

      2. Specify the number of days (the default is 90 days) such that the audit logs older than the specified number of days will be archived and purged

      Note:

      In this case, the format of the audit log filename is JunosSpaceAuditLog_purge-after-days_date-and-time_date-and-time-in-ms.csv.gz, where purge-after-days is the previously specified number of days, date-and-time is the date (in yyyy-mm-dd format) and time (in hh-mm-ss format) before which audit logs will be purged, and date-and-time-in-ms is the date and time in milliseconds at which the job was created.

  3. To archive and purge audit logs from all domains to which you have access, select the Purge audit logs from all accessible domains check box.
    Note:

    By default, audit logs are archived and purged only from domain that you accessed, so the Purge audit logs from all accessible domains check box is cleared.

  4. Select the Archive Logs Before Purge check box.
  5. Specify whether you want to archive the files locally or on a remote server:
    • To archive the files locally (on the active node), from the Archive Mode list, select local.

    • To archive the files on a remote server:

      1. From the Archive Mode list, select remote.

      2. In the User field, enter a valid username to access the remote server.

      3. In the Password field, enter a valid password to access the remote server.

      4. In the Confirm Password field, reenter the password you entered in the preceding step.

      5. In the Machine IP field, enter the IP address of the remote server.

        Note:
        • Depending on whether the Junos Space fabric is configured with only IPv4 addresses or both IPv4 and IPv6 addresses, Junos Space Platform allows you to enter an IPv4 address or either an IPv4 or IPv6 address respectively for the remote server.

        • The IPv4 and IPv6 addresses that you use must be valid addresses. Refer to http://www.iana.org/assignments/ipv4-address-space for the list of restricted IPv4 addresses and http://www.iana.org/assignments/ipv6-address-space for the list of restricted IPv6 addresses.

      6. In the Directory field, enter the directory path on the remote server on which to store the archived log files, ensuring that the directory name ends with /; for example, /home/spaceauditlogs/.

        Note:

        The directory must already exist on the remote server.

  6. (Optional) To schedule the archive and purge operation for later, select the Schedule at a later time check box and specify a start date and time for the archive and purge operation.
    Note:

    You specify the time in the local time zone of the client computer but the archive and purge operation is scheduled according to the time zone configured on the Junos Space Platform server.

  7. (Optional) To specify whether the archive and purge should done on a recurring basis, select the Recurrence check box.
    Note:

    This option is enabled only if you choose to archive and purge audit logs older than a specified number of days.

    A number of fields allowing you to specify when the archive and purge should recur are displayed. The fields are explained in Table 1.

  8. Click Submit.

    Junos Space Platform checks whether a job of this type already exists for that domain:

    • If a job already exists, then a message is displayed indicating that conflicting jobs exist, and the existing conflicting jobs are displayed in a table.

      1. Click Yes to create a new job.

        The Audit Log Archive/Purge confirmation dialog box is displayed with the audit log archive filename and location and a warning indicating that the audit logs will be purged from the database.

      2. Click No to return to the previous page.

        You are taken to the previous page.

    • If no job exists, then the Audit Log Archive/Purge confirmation dialog box is displayed with the audit log archive filename and location and a warning indicating that the audit logs will be purged from the database.

  9. In the Audit Log Archive/Purge dialog box, click Continue to archive and purge the logs.

    The Job Information dialog box is displayed with the job ID. Click the Job ID to view the details; otherwise, click OK to close the dialog box.