I’m a little bit confused about using audittrail.
Running:
/opt/BESServer/bin/BESAdmin.sh -audittrailcleaner -olderthan=365 -preview
gives an output as expected with the cleanup actions. Trying to run:
/opt/BESServer/bin/BESAdmin.sh -audittrailcleaner -olderthan=365 -run
shows the usage.
Running against a single content eg. “oldcontent”:
/opt/BESServer/bin/BESAdmin.sh -audittrailcleaner -oldcontent -olderthan=180 -run
works fine ?
In addition, looking at documentation:
https://www.ibm.com/support/knowledgecenter/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Installation/c_running_the_tivoli_endpoint_ma_onlinux.html#c_running_the_tivoli_endpoint_ma_onlinux
the default value for “olderthan” should be 99 days. Looking at output from
/opt/BESServer/bin/BESAdmin.sh -audittrailcleaner -displaysettings
it seems to be set to 180 Days:
/opt/BESServer/bin/BESAdmin.sh -audittrailcleaner -displaysettings
BES Audit Trail Cleaner Settings:
Delete old versions of custom authored content: false Delete old versions of actions: false Delete old versions of Relay.dat: false Fully delete content marked as deleted: false Fully delete actions marked as deleted: false Fully delete orphaned subactions: false Delete old hidden actions: false Delete actions that have been hidden for this many days: 180 Clean deleted mailbox files: false Delete audit log files: false Synchronize consoles after cleaning: false Remove only data older than: 180 Days Batch size: 100000
Scheduling Settings:
BES Audit Trail Cleaner is scheduled: false
BES Audit Trail Cleaner next run:
BES Audit Trail Cleaner run interval (hours):