Clear the Audit Log

Intel AMT Features > Access Monitor > Use Cases > Clear the Audit Log

Clear the Audit Log

The following steps describe how to clear all the Audit Log records.

1. Retrieve the instance of AMT_AuditLog, where the “Name” key equals “Intel(r) AMT:Audit Log”.

2. Invoke AMT_AuditLog.SetAuditLock to lock the audit log, as described in Lock and Unlock the Audit Log.

Note:

To ensure that the entire log is cleared, Intel recommends that you wrap the ClearLog method with the lock and unlock methods (see Lock and Unlock the Audit Log).

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.

$auditLogRef =$wsmanConnectionObject.NewReference("SELECT * FROM AMT_AuditLog WHERE Name='Intel(r) AMT:Audit Log'")

$inputObject =$auditLogRef.CreateMethodInput("ClearLog")

$outpObject =$auditLogRef.InvokeMethod($inputObject)

$returnValue =$outpObject.GetProperty("ReturnValue")

Instance Diagram

Classes Used in This Flow

• AMT_AuditLog

SDK Sample

If there is a sample demonstrating this flow, it is included in the SDK installation file. See SDK Installation Layout for details.