Application events log retention in saviynt

[Nmaheshwari]

Can anyone let me know what is application events log retention in saviynt? 

[Srinivas]

Hi @Nmaheshwari 

Thanks for reaching out to us.

Application logs are stored in a Elasticsearch index instead of flat files (such as debug.log, error.log and so on).Logs are also shipped in real time to 3 different locations:

• Elasticsearch container: Logs are shipped to Elasticsearch using fluntd and can viewed by partners and customers from the application UI.
• Observe: Logs are shipped to Observe using observe agent and can be viewed by Saviynt operations team (CloudOps, Engineering, PS, CPS, POC) from Observe UI.
• S3 Bucket: Logs from both AWS and Azure tenants are also shipped using fluentd agent to a centralized S3 bucket for long term retention.

You can request old logs stored in s3 bucket by creating a ticket for CloudOps queue.

While creating the ticket please provide following details:

• Customer Name and Environment
• Microservice for which logs are required
• Duration for which logs are required
• Reason for Old Logs

CloudOps team will download the required logs from s3 bucket and share with you.

Let us know if this helps!

Thanks

Srinivas

[Nmaheshwari]

Hi Srinivas, 

Thanks for your reply!

You have shared the policy for application logs. We are looking for the Event logs. 

It would be great, if you can share that as well.

Thanks,

Nupur

[Srinivas]

Hi Nupur

Could you please refer this below post.

 https://forums.saviynt.com/t5/identity-governance/application-audit-logs-retention-query/m-p/7906/hi... 

Thanks 

Srinivas