Configuring audit and debug information

You can modify the default audit and debug log settings in IBM Security Guardium Key Lifecycle Manager as per your requirements.

Audit files
IBM Security Guardium Key Lifecycle Manager has a default directory for audit data. The file location depends on the value of Audit.handler.file.name property in SKLM_DATA/config/SKLMConfig.properties file.
Configuring the level of audit information
Depending on your need, you can change the default setting that IBM Security Guardium Key Lifecycle Manager uses to collect audit information.
Generating audit records in syslog and LEEF formats
You can use the IBM Security Guardium Key Lifecycle Manager graphical user interface to configure and generate the audit records in syslog or Log Event Extended Format (LEEF) format and send them to a syslog server.
Archiving transactional data of keys served to clients
IBM Security Guardium Key Lifecycle Manager stores the transactional data of keys that are served to clients in a database table. To prevent the database table from overflowing, you can regularly archive this transactional data. During the backup, restore, and replication operations, IBM Security Guardium Key Lifecycle Manager automatically archives the transactional data to avoid process failure because of database overflow.
Setting up debug logging
You can change the default setting that IBM Security Guardium Key Lifecycle Manager uses to collect debug information. Debug log files provide additional information to analyze and troubleshoot IBM Security Guardium Key Lifecycle Manager problems.
Downloading log files
Log files contain status and error messages that are useful in analyzing and troubleshooting IBM Security Guardium Key Lifecycle Manager problems. You can download the log files from the graphical user interface.
Deleting log files in IBM Security Guardium Key Lifecycle Manager container
When you enable debug logging, the number of log files might increase. You must periodically delete or purge the log files to prevent them from taking too much disk space.
Moving Db2 transaction log files for good performance
Periodically move old Db2 transactional logs that the IBM Security Guardium Key Lifecycle Manager database creates. Otherwise, large numbers of transactional logs might affect performance.

Parent topic: Administering