Audit log in VMware live Site Recovery and retention policy for logs

Products

• VMware Live Recovery

Issue/Introduction

In VMware Live Site Recovery 9.x, audit log records access attempts including User login events (success/failure).Permission checks (authorization failures if a user attempts an action they are not permitted to perform).

 

Environment

VMware Live Recovery 9.x

Resolution

Audit-related activities are recorded in the following Site Recovery Manager log file vmware-dr-audit.log which is in the location- /var/log/vmware/srm.

The log file Size and Number of VMware Live Site Recovery Server Log Files can be changed. You can modify the VMware Live Site Recovery log settings in the vmware-dr.xml configuration file on the VMware Live Site Recovery Server.

VMware Live Site Recovery 9.0: The vmware-dr.xml file is located in the /opt/vmware/srm/conf/ directory .

VMware Live Site Recovery 9.0.3: The vmware-dr.xml file is located in the /opt/vmware/etc/vmware-dr/ directory.

Links for reference:  https://techdocs.broadcom.com/us/en/vmware-cis/live-recovery/live-site-recovery/9-0/how-do-i-protect-my-environment/collecting-srm-log-files/change-size-and-number-of-srm-log-files.html

https://techdocs.broadcom.com/us/en/vmware-cis/live-recovery/live-site-recovery/9-0-3/about-vmware-live-site-recovery-installation-and-configuration/how-do-i-protect-my-environment/collecting-srm-log-files/change-size-and-number-of-srm-log-files.html