Notifications
Clear all
IAM and PAM
1
Posts
1
Users
0
Reactions
2
Views
Topic starter
20/07/2026 2:10 am
Hi everyone! 👋 We just started using our PAM solution (CyberArk) a few months ago, and the session recordings are already filling up our storage. I'm a bit lost on setting a good retention policy.
Could you share what's working for your teams? I'm especially curious about:
- How long you keep recordings (like 30 days, 90 days, a year?)
- If you handle different types of access differently (e.g., root vs. regular user sessions)
- Any automation or scripts you use to clean up old files
Here's a snippet of the log cleanup script I'm trying to understand from our docs:
```bash
# Example from our internal wiki
find /var/log/pam/sessions -type f -name "*.log" -mtime +30 -delete
```
Is something like this common? Thanks so much for any guidance!