Archiving and Data Retention

1. Introduction

The Archive process allows you to configure and schedule the automatic archiving of auditing logs stored in the main database.

2. Setting Up an Archive Profile

In this guide, we will look at adding an archive profile for an Active Directory component, but the steps to do this can also be applied to other components as the process is similar.

Follow the steps below to set up an Archive Profile:

  • Click on the Archive & Import option from the Settings screen of the Lepide Data Security Platform

The Archive Settings screen will be displayed:

A screen shot of a computer

Description automatically generated
Archive Settings

  • Click on the

    Archive Database
    icon to create a new Profile. The Archive Database dialog box will be displayed:

A screenshot of a computer

Description automatically generated
Archive Settings with an Archive Profile Set Up

The Component Name drop down menu will display a list of all the installed components.

  • Enter the details as required into the Archive Database dialog box. The Active Directory options are as follows:

  • Select the Component Name from the drop down list of installed components

  • Select the Server Name from the drop down list of servers

  • Specify the archive path where the archived data will be stored. Use the

    Restore Data
    icon to Browse and select a path from here

  • Select Delete archived file(s) older than x days for automatic deletion of archived files older than the number of days you specify

  • Select Archive Now to start the archive process when you click OK

  • Select Schedule Archive to specify a regular Weekly or Monthly time to start the archive process

  • Specify the age of the data which is to be archived in the Archive data older than or equal to x days option

  • Select the Delete records from current database after archiving option to remove the archived records from the database. This means that the records will no longer be available in the Lepide Data Security Platform. If you do need to analyze these records after they have been deleted, then you can restore the archive and run the Explore Backup Module. Please see Sections 3 and 4 of this guide for more information on how to do this.

  • Select Shrink database after archive to reduce the database size once the archive process has run

  • Click OK when finished

The new profile will be added to the Archive Settings screen showing the schedule details:

A screenshot of a computer

Description automatically generated
Restore Data Options

3. Restoring the Archived Data

The restore option, from the Archive Settings screen, will restore the archived data into the database specified. It will not restore the data into the main Lepide Data Security Platform database so to analyze the restored data, use the Explore Backup module which is explained in Section 4.1 of this guide.

To restore the archived data:

  • Click Restore Now from the Archive Settings screen:

A screenshot of a computer

Description automatically generated
Component Selection

The Restore Data dialog box is displayed:

  • Specify the following options:

  • Enter the SQL Server name or use the

    Select Database to Explore
    icon to select the Server name from a list

  • Use SQL Authentication and enter the User Name and Password

  • Click Test Connection

  • Specify the Database Name

  • Specify the archive path in the Set Archive Path box. This is the location of the archived database

  • Select Delete Restore Database After xxx Days if you want the restored database to be deleted later

  • Select the Date Range of the data to be restored

A screenshot of a computer

Description automatically generated
Select Database to Explore with Information Added

  • Click OK

The data is restored to the specified database

4. How to Report on the Restored Data

If the option ‘Delete records from current database after archiving’ has been selected when creating the archive profile, the archived data will not be accessible from within the Lepide Data Security Platform once the archive has run. However, if this archived data is first restored using the restore process described above, then the data can be analyzed using the Explore Backup Module.

4.1 The Explore Backup Module

Once archived data has been restored, reports can be run to explore the restored data. To do this, follow the steps below:

From the States & Behavior screen:

  • Choose Explore Backup from the tree structure on the left-hand side

The Component Selection dialog box will be displayed:

A screenshot of a computer

Description automatically generated
Explore Backup Reports

  • Select the Component required

  • Click OK

The Select database to explore dialog box will be displayed:

A screenshot of a computer

Description automatically generated
Object Modifications Report from Explore Backup

  • Specify the following options:

  • Select the Component from the drop down list

  • Specify the SQL Server Name

  • Choose SQL Authentication – Add the User Name and Password

  • Click Test Connection

A screenshot of a computer

Description automatically generated
Generated Object Modifications Report for Restored Data
  • Specify the Database Name

  • Click OK

A screenshot of a computer

Description automatically generated
Archived Settings Window

A list of available reports is displayed:

  • Select the report you want to use. In this example, Object Modifications has been chosen:

A screenshot of a computer

Description automatically generated

  • The report is displayed:

  • Select any filter options you require – for example specify a date/time period

  • Click Generate Report

The report will run using the restored data:

A screenshot of a computer

Description automatically generated
  • Run any of the other available reports you require from this window

  • Close this report window when finished

5. Other Archive Options

A computer screen shot of a computer

Description automatically generated

Other options available from the Archive Settings window are as follows:

  • To archive the data now rather than at the scheduled time, click Archive Now

  • To edit the archive profile, select the profile and click the Edit icon

  • To delete the archive profile, select the profile and click the Remove icon

  • To delete the restored database, select the profile and click the Delete the Restored DB icon