Skip to main content
Veteran
January 21, 2025

Log Retention Period for Session Recordings

  • January 21, 2025
  • 6 replies
  • 721 views

Just trying to see what is your current data retention period for Session Recordings. I understand this depends on various factors - compliance requirements, deployment size/usage , cost-benefit, Org maturity level   etc. But posting this to get a sense of how other users are managing it . We have around 60-90 days live on appliance, plus another 90 days on a network share. As the usage increases the session recordings data is growing exponentially. But at the same time investigations may require some historical data as well. 

    6 replies

    BeyondTrust Employee
    January 22, 2025

    The session logs are retained on the appliance for a period of up to 90 days. To maintain historical data user can download session recordings from the /login interface during 90 days period or download in bulk through the BeyondTrust Integration client. 

    bt101Author
    Veteran
    January 22, 2025

    Sure, thank you.  We have integration client downloading the data once per day. Based on the session duration and count , we see appliance holding anywhere between 60-90 days of recordings. I am trying to understand how other users are handling it - typical log retention period for session recordings & live vs archival 

    Trailblazer
    June 12, 2025

    Adding to this point - Where can we see the retention period of session logs? I see Data Retention tab under configurations. Under it, which is the correct field for session logs? Please suggest

    BeyondTrust Employee
    June 12, 2025

    Hello ​@AyanWS - you’ll find the details for this under /login > Mangement > Security. The guide for this section is here: https://docs.beyondtrust.com/pra/docs/on-prem-security-settings#miscellaneous, which outlines which field and setting controls which feature.

    Trailblazer
    June 12, 2025

    Hi ​@PhillC, appreciate your response. Unfortunately, when I try to login into  /login page - it says page cannot be displayed. Please suggest. I hope this different than appliance page?

    BeyondTrust Employee
    June 12, 2025

    Hello ​@AyanWS - Yes, the SRA (PRA/RS) appliances have two different web interfaces - /appliance and /login. 

    Please confirm you are using the fully assigned DNS Hostname to access this page? Example: https://pra.example.com/login and not the IP or locally assigned DNS name?

    If you are using the full DNS Hostname, and still having issues accessing /login, then you will need to log a Support Case as something appears to be broken with your appliance.