Archiving (audit) results

The results archive includes: reports, assessment tests, entity audit trail, privacy sets, classification processes, and the view and sign-off trails and the accumulated comments from workflow processes. Use Archived results for compliance purposes.

About this task

Archiving results is optional: archive results if you need to store more than your disk allows.

An alternative to using the results archive is to save a PDF file from the Audit Process after all users complete the review process.

Guardium’s archive function creates signed, encrypted files that cannot be tampered with. DO NOT change the names of the generated archive files. The archive and restore operations depend on the file names that are created during the archiving process. Archive and export activities use the system shared secret to create encrypted data files. Before information encrypted on one system can be restored on another, the restoring system must have the shared secret that was used on the archiving system when the file was created.

The audit process results that must be signed are not archived until they are reviewed and signed. Only the Audit Processes configured to be archived are archived. To archive an audit process, select Archive in the Advanced options of the Name and archive section of the Create New Audit Process page.

The results sets can be restored only into an investigation center. You can set up an investigation center by creating a special investigation user account on a Guardium® appliance. See Investigation center.

Procedure

  1. Go to Manage > Data Management > Results Archive.
  2. For Archive data older than, enter a value and select a unit of time from the menu. To archive data older than today's data, enter the value 1, and select Day(s) from the menu.
  3. Use Ignore data older than to control how many days of data are archived. Any value that is specified here must be greater than the Archive data older than value. If you leave this field blank, you archive data for all days older than the value specified in Archive data older than. For example, if you archive daily and purge data older than 30 days, you archive each day of data 30 times (before it is purged on the 31st day).
  4. Select a Protocols option, and enter the appropriate information. Depending on how your Guardium system is configured, one or more of these buttons might not be available. For a description of how to configure the archive and backup storage methods, see Configuring external storage or File Handling CLI Commands.
  5. Optional: Use the Scheduling section to define a schedule for running this operation regularly.
  6. Click Test connection. The system attempts to verify the configuration by sending a test data file to that location. If the operation fails, an error message appears and the configuration is not saved.
  7. Optional: Click Run Once Now to run the operation now.

What to do next

  • Verify that the operation completed successfully. Go to Manage > Reports > Data Management > Aggregation/Archive Log. Each archive operation shows multiple activities. Check that the status of each activity is Succeeded.