Go Up
You are here: AdministrationSettingsLong-Term Archive

Long-Term Archive

The Long-Term Archive is configured by default, irrespective of your subscription plan and settings you specified when configuring a monitoring plan. To review and update your Long-Term Archive settings, navigate to Settings Long-Term Archive and click Modify.

Option Description

Write audit data to

Specify the path to a local or shared folder where your audit data will be stored. By default, it is set to "C:\ProgramData\Netwrix Auditor\Data".

By default, the LocalSystem account is used to write data to the local-based Long-Term Archive and computer account is used for the file share-based storage.

Subscriptions created in the Netwrix Auditor client are uploaded to file servers under the Long-Term Archive service account as well.

NOTE: It is not recommended to store your Long-Term Archive on a system disk. If you want to move the Long-Term Archive to another location, refer to the following Netwrix Knowledge base article: How to move Long-Term Archive to a new location. Additional procedures are required if you upgraded Netwrix Auditor from 8.0. See the article for details.

Keep audit data for (in months)

Specify how long data will be stored. By default, it is set to 120 months.

Data will be deleted automatically when its retention period is over. If the retention period is set to 0, data will be automatically stored for the last 4 data collections for most of the data sources (event if the retention period is set to 0 data on SQL Server, file servers and Windows Server changes will be stored for the last 2 data collections, and 7 data collections for user activity).

Use custom credentials (for the file share-based Long-Term Archive only)

Select the checkbox and provide user name and password for the Long-Term Archive service account.

NOTE: You can specify a custom account only for the Long-Term Archive stored on a file share.

The custom Long-Term Archive service account can be granted the following rights and permissions:

  • The List folder / read data, Read attributes, Read extended attributes, Create files / write data, Create folders / append data, Write attributes, Write extended attributes, Delete subfolders and files, and Read permissions advanced permissions on the folder where the Long-Term Archive is stored
  • The Change share permission and the Create files / write data folder permission on file shares where report subscriptions are saved

    NOTE: Subscriptions created in the Netwrix Auditor client are uploaded to file servers under the Long-Term Archive service account as well.

NOTE: Netwrix Auditor informs you if you are running out of space on a system disk where the Long-Term Archive is stored by default. You will see events in the Netwrix Auditor System Health log once the free disk space starts approaching minimum level. When the free disk space is less than 3 GB all Netwrix services will be stopped (except for services responsible for user activity, SharePoint and syslog auditing).

Go Up