Skip to content

Commit b4d0b36

Browse files
committed
DOC-1485: Fix doc reference to configurable audit log retention
1 parent f85966d commit b4d0b36

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

modules/manage/partials/audit-logging.adoc

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -397,7 +397,15 @@ ifdef::env-cloud[]
397397

398398
== Configure retention for audit logs
399399

400-
Assess the retention needs for your audit logs. You may not need to keep the logs for the default seven days. This is controlled by setting the `retention.ms` property for the `_redpanda.audit_log` topic.
400+
Ideally, you export audit events to your own SIEM for persistence supporting your audit and compliance needs rather than relying on in-cluster persistence.
401+
402+
As you assess the retention needs for your audit logs, if you find that you do not need to keep them for the default seven days, and you must revise the retention period:
403+
404+
NOTE: Redpanda Data recommends that you retain audit logs for at least one year.
405+
406+
. Remove `_redpanda.audit_log` topic from the `no_delete` topics list in your cluster configuration.
407+
. Update the `retention.ms` property for the `_redpanda.audit_log` topic.
408+
. Add the `_redpanda.audit_log` topic back to the `delete` topics list.
401409

402410
== Next steps
403411

0 commit comments

Comments
 (0)