Audit Log Maintenance in AEM 6

AEM events that qualify for audit logging generate much-archived data. This data can quickly grow over time due to replications, asset uploads, and other system activities.
The Audit Log Maintenance includes several parts of functionality that enable the ability to automate audit log maintenance under specific policies.
It is implemented as a configurable weekly maintenance task and is accessible via the Operations Dashboard monitoring console.
For more information, refer to the Operations Dashboard Documentation.

There are three types of Audit Log Purge options:

• Page Audit Log Purging
• DAM Audit Log Purging
• Replication Audit Log Purging

Each can be configured by creating rules in the AEM Web Console. After they have been configured, you can trigger them by going to Tools - Operations - Maintenance - Weekly Maintenance Window and running the AuditLog Maintenance Task.

Configure Page Audit Log Purging
Follow these steps in order to configure Audit Log Purging:

Go to the Web Console Admin by pointing your browser to http://localhost:4502/system/console/configMgr/
Search for an item called Pages audit Log Purge rule and click it.

Next, configure the purge scheduler according to your requirements. The available options are:

• Rule name: the name of the audit policy rule;
• Content path: the path of the content the rule will apply to;
• Minimum age: the time in days the audit logs need to be kept;
• Audit log type: the type of audit log that should be purged.

Note:
The content path only applies to children of the /var/audit/com.day.cq.wcm.core.page node in the repository.

Save the rule.

The rule you just created needs to be exposed in the Operations Dashboard in order for it to be executed. In order to do this, go Tools - Operations - Maintenance from the AEM Welcome screen.

Press the Weekly Maintenance Window card.

You will find the maintenance task already present under the AuditLog Maintenance Task card.



You can either inspect the date of the next execution, configure it, or manually executing it by pressing the play button.

In AEM 6.3, if the scheduled maintenance window closes before the Audit Log Purge task can complete, the task stops automatically. It will resume when the next maintenance window opens.
With AEM 6.4, you can manually stop a running Audit Log Purge Task by clicking the Stop icon. On the next execution, the task will safely resume.

Note:
To stop the maintenance task means to suspend its execution without losing track of the job already in progress.

Configure DAM Audit Log Purging
Navigate to the System Console at http://localhost:4502/system/console/configMgr

Search for DAM audit Log Purge rule and click the result.

In the next window, configure your rule accordingly. The options are:
Rule name: the name of the audit policy rule;
Content path: the path of the content the rule will apply to
Minimum age: the time in days the audit logs need to be kept
Audit Log Dam event types: the types of DAM audit events that should be purged.

Click Save to save your configuration

Configure Replication Audit Log Purging
Navigate to the System Console at 

http://localhost:4502/system/console/configMgr

Search for Replication audit Log Purge Scheduler and click on the result

In the next window, configure your rule accordingly. The options are:
Rule name: the name of the audit policy rule
Content path: the path of the content the rule will apply to
Minimum age: the time in days the audit logs need to be kept
Audit log Replication event types: the types of Replication audit events that should be purged

Click Save to save your configuration.