Filtering specific audit events to reduce database size - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

Identity Manager auditing can generate significant volumes of data, potentially impacting database performance and storage. Administrators can minimize this overhead by filtering out non-essential events, such as ViewUserEvent, which are often collected by default but may not be required for compliance or reporting.

Below is a sample of the database showing the ViewUserEvents:

 

Environment

identity Manager 14.x 

Resolution

To filter specific events from the auditing process, follow these steps:

1. Locate the Audit Configuration File: Navigate to the Identity Manager configuration directory and locate the audit.xml file.
2. Backup the File: Create a backup copy of the audit.xml file before making any modifications.
3. Add the Filter Rule: Open the file in a text editor and add the following XML snippet within the <filters> section or at the designated filter location: <filter eventName="ViewUserEvent" filterType="exclude"/> 
   Note: Replace "ViewUserEvent" with the name of any other event you wish to exclude.
4. Restart Services: Save the changes and restart the Identity Manager application server to apply the new audit settings.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.