Storage Policy Types

There are three different storage policies that determine what happens when the audit log is full:

•     No Rollover: Intel AMT prevents critical events from completing, since they cannot be logged. The Auditor should retrieve log entries and clear the log periodically to avoid this condition. This is the only option in Intel AMT Releases 4.0 and 5.0.

•     Rollover Allowed: Intel AMT writes over the oldest event in the log when a new event occurs. This is the default policy in Release 5.1 and later releases.

•     Restricted Rollover Allowed: Intel AMT writes over the oldest event in the log when a new event occurs, as long as that event has been in the log longer than a minimum period, specified in days. This option is available in Release 5.1 and later releases.

See Also:

•   Set the Audit Storage Policy •   Read the Audit Log •   Clear the Audit Log

Copyright © 2006-2022, Intel Corporation. All rights reserved.