"View Password Requests" Report

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM is configured that "Password View Request Delete Interval Days" is set to 30 days, but only 7 days worth of data appears when the "View Password Requests" report is run. "Maximum number of Report Entries" is set to 350,000 entries, but the report shows 2-3,000 entries. Why is there data missing from this report?

Environment

Privileged Access Manager, all versions

Resolution

The "View Password Requests" report shows all times that passwords were accessed, not only times that a password view policy was involved. The information for this report is gotten from the audit table, which is controlled by going to Settings > Credential Manager > Auto-Archive. By default, this value is set to 7. If it is required to have PAM store the audit records for longer, please increase this value.

Additional Information

For more information about the Auto-Archive feature, please refer to the Archive and Purge Metrics and Audit Logs section of the documentation link below.

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/4-1-3/protect-privileged-account-credentials/set-up-credential-manager-operation-settings.html