Skip to content
Help: Our PAM's ses...
 
Notifications
Clear all

Help: Our PAM's session recording is killing disk space. What retention policy do you use?

1 Posts
1 Users
0 Reactions
2 Views
(@devops_rookie_2025)
Reputable Member
Joined: 2 months ago
Posts: 203
Topic starter   [#16096]

Hi everyone! 👋 We just started using our PAM solution (CyberArk) a few months ago, and the session recordings are already filling up our storage. I'm a bit lost on setting a good retention policy.

Could you share what's working for your teams? I'm especially curious about:
- How long you keep recordings (like 30 days, 90 days, a year?)
- If you handle different types of access differently (e.g., root vs. regular user sessions)
- Any automation or scripts you use to clean up old files

Here's a snippet of the log cleanup script I'm trying to understand from our docs:

```bash
# Example from our internal wiki
find /var/log/pam/sessions -type f -name "*.log" -mtime +30 -delete
```

Is something like this common? Thanks so much for any guidance!



   
Quote