Skip Navigation

Configure audit settings

You can enable or disable auditing of administrator or security events in
BlackBerry UEM
. When auditing is enabled, you can choose how long you want to keep records, the number of results to display, and when to delete old records. When auditing is disabled, all records are deleted.
Enabling security event auditing requires significant database resources. You can download the Performance calculator and use it to to estimate the resources required.
  1. On the menu bar, click
    Settings
    >
    Infrastructure
    >
    Audit configuration
    .
  2. In the right pane, click .
  3. In the
    Administrator event audit settings
    section, do one of the following:
    Task
    Steps
    Enable administrator event auditing
    1. In the
      Administrator event auditing
      field, click
      Enabled
      .
    2. In the
      Administrator audit record retention
      field, type the maximum number of days to keep a record.
    3. In the
      Maximum number of records
      field, type the maximum number of records to display in the UI. If the number of records exceeds this value, then the administrator must shorten the date range or select a category to reduce the number of records.
    4. In the
      Daily delete time (UTC)
      field, choose the time of day to delete records.
    Disable administrator event auditing and purge all records
    1. In the
      Administrator event auditing
      field, click
      Disabled
      .
  4. In the
    Security event audit settings
    section, do one of the following:
    Task
    Steps
    Enable security event auditing
    1. In the
      Security event auditing
      field, click
      Enabled
      .
    2. In the
      Security audit record retention
      field, type the maximum number of days to keep a record.
    3. In the
      Daily delete time (UTC)
      field, choose the time of day to delete old records.
    4. To stop auditing a security event, click beside the event type.
    5. To add security events to audit, click . Select the events and click
      Add
      .
    6. Optionally, if a drop-down list is available in the
      Setting
      column beside an event type, choose the condition to log the event.
    Disable security event auditing and purge all records
    1. In the
      Security event auditing
      field, click
      Disabled
      .
  5. Click
    Save
    .
  • Restart the
    BlackBerry UEM Core
    service on every computer that hosts a
    BlackBerry UEM
    instance.
  • Log in to the management console again.