FortiPAM
FortiPAM allows you to protect, isolate and secure privileged account credentials, manage and control privileged user access, and monitor and record privileged account activity.
pabarro
Staff
Staff
Article Id 416998
Description This article describes how to configure FortiPAM to purge or delete older logs.
Scope FortiPAM.
Solution

GUI option:

  • Go to System → Log & Report → Log Settings.
  • Configure: 
    • Log Retention Period.
    • Log Quota (maximum disk percentage).
    • FortiPAM will automatically delete the oldest logs when the configured limit or date is reached.

 

CLI option (To do it manually):

The option is via SSH, and to delete the old files:

 

cd /var/log
ls -lh

 

Delete with:

 

find /var/log -type f -mtime +30 -delete

 

Note:

This deletes logs older than 30 days.

 

If it is using video recording storage:

 

find /data/video/ -type f -mtime +30 -delete

 

Combined Recommendation

In case there is no disk space:

  1. Add a new disk in VMware (cleaner than resizing).
  2. Assign that disk to the 'Logs' or 'Video Recordings' purpose in FortiPAM.
  3. Configure automatic log retention (by days or size).

 

Best practices
  1. Always send logs to FortiAnalyzer or a syslog server for historical archiving.
  2. Use retention settings in the GUI to automate cleanup.
  3. Lower debug/trace verbosity to reduce log volume.
  4. Test manual cleanup first on the secondary node or maintenance window.
  5. Example retention plan:
    1. Event logs → 90 days.
    2. Video/session recordings → 180 days.
    3. Debug logs → 7–14 days.