How to delete Azure SQL audit logs using PowerShell?

Question

My Azure SQL Server has been storing the audit logs for over a year, and storage size is in the TBs. I would like to keep the logs for 3 months max and delete the rest, how can I do this using PowerShell? Would setting the RetentionInDays parameter of Set-AzureRmSqlServerAuditingPolicy cmdlet to 90 days achieve the same? Will it delete anything older than 90 days, or would I need to run a script to explicitly delete them?

Thanks, and really appreciate it.

Alberto Morillo · Accepted Answer · 2018-11-26 20:50:46Z

1

You probably left the retention period to the default so the Azure tables created by Azure SQL Auditing will keep data forever. Please set the retention period according to your expectations. Expired records will be deleted.

You can use -RetentionInDays to set the retention period.

Set-AzureRmSqlServerAuditingPolicy -AuditType Table -EventType Login_Failure,Login_Success -StorageAccountName pradebban -StorageKeyType Primary -RetentionInDays 90 -ServerName hiddenserver -ResourceGroupName hiddenresourcegrp -TableIdentifier pradebban

edited Nov 26, 2018 at 20:50

answered Nov 26, 2018 at 20:43

Alberto Morillo

15.8k3 gold badges29 silver badges32 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Hassan K Over a year ago

Yes, it was set to default '0' and know it can be changed to 90 days from the UI. Wanted to check if PowerShell could do the same, so thank you for the confirmation.

Collectives™ on Stack Overflow

How to delete Azure SQL audit logs using PowerShell?

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related