Symantec Access Management

Audit logs are not getting archived as per the enabled parameters in "Logs" tab of FSS UI. 

1. We have restarted the server

2. Changed the parameters like size based, time based

Logs are being written without any issue though they are not getting rolled after the threshold is reached or the time of rollover.

Please suggest

Hi Venkat,

Refer :

 Tech Tip : CA Single Sign-On : Auditlog Rollover does not work 

smaccess.log fails to roll over intermittently. - CA Knowledge 

The smaccess log is not being rolled over at the scheduled time (Everyday @ 00:00 hours) on Siteminder 12.52 SP1 Cr5 Policy Sever.

This happens for time based Audit log rollover even though the LastRolloverTime registry is set to 0 as below:

HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\Reports=923788632

LastRolloverTime= 0; REG_DWORD

Cause:

The algorithm is failing when the roll time is set to 00:00. The algorithm will work if the roll time is set to 23:59.

Resolution/Workaround:

The work around to resolve the issue is to set the Audit Logfile Rollover time to 23:59

Regards,

Leo Joseph.

Can you also check the permission of the user account running the Policy Server process to write into HKLM\SOFTWARE\Wow6432Node\Netegrity registry. 

You can try to give full permission to  HKLM\SOFTWARE\Wow6432Node\Netegrity registry and check how it goes, 

Regards,

Ram,