PAM-CMN-2978 and PAM-CMN-2980 messages

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When we click on "View Cluster Logs" on the Configuration > Clustering page, we always see PAM-CMN-2978 and PAM-CMN-2980 messages from the current day. We do not have daily log purging configured anywhere as far as we know. Why is this purging going on?

Environment

Release : 3.4

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

This is not a problem, the messages are informational and show that the daily log purge job in PAM, starting at 6:25am UTC, includes purging of old database transaction logs. At what age the logs get purged can be controlled with cluster tuning settings, see page https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/3-4-2/deploying/set-up-a-cluster/configure-a-cluster.html. Because these logs include information on data replication activity from one cluster node to another, messages for the log purge are saved as cluster transaction logs in the PAM session logs.

The "View Cluster Logs" action only shows messages for a day, which might make it look like something is purged daily when it shouldn't. You can go to the session logs, filter on cluster transactions and confirm that the messages for previous days are still present and get purged only according to the session log purge settings.

Resolution

Nothing to resolve, see the problem cause section.